Breach Disclosure: GateHub

Breach Disclosure: Gatehub

Gatehub, a cryptocurrency wallet service, suffered a data breach of 1.4 million accounts. According to an article by ArsTechnica, the full contents of the database were leaked online, including two-factor keys, mnemonic phrases and wallet hashes. ArsTechnica reached out to Gatehub to confirm the full extent of the breach, and the company refuted that the keys, phrases and wallet hashes were leaked. The full contents include email addresses, mnemonic phrases, wallet hashes and bcrypt password hashes were leaked.

Recommendations

• If not already enabled, turn on the compromised credentials rule for all relevant entities and ensure relevant emails are entered for those entities, or reach out to [email protected] for assistance
• If one of your entities receives an alert, ZeroFOX recommends immediate password changes for the affected account
• Enable 2-factor authentication for all of your organizational accounts to help mitigate phishing and credential stuffing attacks

Details

Raidforums user Troy Hunt (previously Jnx3cx) posted this breach on October 25, 2019. It is worth noting that Troy Hunt is most likely a troll account.

The RaidForums administrator, Omnipotent, then moved this to the Official subforum on November 2, 2019.