zerofox logo
Advisories

Breach Disclosure: Foodco

|by Alpha Team

banner image

Standing Intelligence Requirements

For the most up to date list of ZeroFox Threat Research’s Intelligence Requirements, please visit:

https://cloud.zerofox.com/alpha_team/advisories/14956

Details

On July 12, 2022, the Telegram Channel "Dataleak" posted a data breach package targeting Foodco, a US-based back-office management program which is used for manage food service operations. The data dump was also circulated in Raid Forums on February 18, 2021 and also in a Telegram Channel "Darknet" (hxxps[:]//t[.]me/dbforall/92) on February 7, 2021. From the package published in "Dataleak" Telegram channel , ZeroFox extracted 152,569 email addresses and plain-text passwords.

Recommendations

  • If not already enabled, turn on the compromised credentials rule for all relevant entities and ensure relevant emails are entered for those entities, or reach out to [email protected] for assistance
  • If one of your entities receives an alert, ZeroFox recommends immediate password changes for the affected account
  • Enable 2-factor authentication for all of your organizational accounts to help mitigate phishing and credential stuffing attacks

Tags: data breach,  us/canada, food/agriculture