Standing Intelligence Requirements

For the most up to date list of ZeroFox Threat Research’s Intelligence Requirements, please visit:

https://cloud.zerofox.com/alpha_team/advisories/14956

Details

Disk Union, a Japanese music store chain that makes vinyl records suffered a data breach. The corresponding data package was shared on the Telegram channel "We Leak Database" (on June 24, 2022) by a user, who noted that the data package includes 701,000 user records, with the passwords stored in plain text. The package was also shared on various other platforms on the internet, such as BreachForums (on June 24, 2022, by the user "r4idf0rum5") and XSS (on June 24, 2022, by the user "system45"). From this package, ZeroFox extracted 700,675 usernames, email addresses, and hashed passwords. Other notable compromised data fields in this package included name, phone number, and address.

Recommendations

• If not already enabled, turn on the compromised credentials rule for all relevant entities and ensure relevant emails are entered for those entities, or reach out to [email protected] for assistance
• If one of your entities receives an alert, ZeroFox recommends immediate password changes for the affected account
• Enable 2-factor authentication for all of your organizational accounts to help mitigate phishing and credential stuffing attacks