Breach Disclosure: OrderSnapp

Breach Disclosure: OrderSnapp

In June, 2020, the point of sale product provider OrderSnapp, suffered a data breach. The breached data includes over 1.3 million records of user data including names, email addresses, passwords, contact information and more.

Standing Intelligence Requirements

For the most up to date list of ZeroFOX Threat Research’s Intelligence Requirements, please visit:

https://cloud.zerofox.com/alpha_team/advisories/14956

Recommendations

• Enable 2-factor authentication for all of your organizational accounts to help mitigate phishing and credential stuffing attacks
• If not already enabled, turn on the compromised credentials rule for all relevant entities and ensure relevant emails are entered for those entities, or reach out to [email protected] for assistance
• If one of your entities receives an alert, ZeroFOX recommends immediate password changes for the affected account
• Review network logs for potential signs of compromise and data egress.
• Enforce administrative or application control restrictions to prevent unauthorized installation of software or media.

Details

The hacker known as ShinyHunters posted a thread on a popular cyber crime forum in November, 2020, providing the data breach package for free to members of the forum. In the thread they detail the number of records contained within the breached data and the types of user information.

Figure 1: Post from ShinyHunters advertising OrderSnapp breach data

The compromised data contains multiple fields, holding the following user information for 1,304,418 accounts:

• Email address
• First name
• Last name
• Bcrypt hashed passwords