Breach Disclosure: AgusiQ-Torrents

Polish torrent site AgusiQ-Torrents[.]pl has been breached, exposing the login details of over 90,000 users. Passwords for the site were hashed using the MD-5 algorithm, which has flaws that could be exploited to reveal plain-text passwords. The breach database was offered for sale on RaidForums in October 2019.

Recommendations

If not already enabled, turn on the compromised credentials rule for all relevant entities and ensure relevant emails are entered for those entities, or reach out to [email protected] for assistance
If one of your entities receives an alert, ZeroFOX recommends immediate password changes for the affected account
Enable 2-factor authentication for all of your organizational accounts to help mitigate phishing and credential stuffing attacks

Details

Information related to over 90,000 user accounts has been exposed, after Polish torrent site AgusiQ-Torrents[.]pl was breached. Breach data was offered for sale on RaidForums in October 2019.

Figure 1. Sale add, with sample of data, on Raidforums

Exposed data includes email and IP address, username, and MD5-hashed passwords. This is unfortunate for users involved, as there are many security issues in the MD-5 hashing algorithm which allow it to easily be broken, so that plain text passwords could potentially be recovered.