Breach Disclosure: PropTiger

In January 2018, the Indian property website PropTiger suffered a data breach which resulted in a 3.46GB database file being exposed. This week however, that database ended up on the popular hacking site, RaidForums for users to download and analyze. There were an estimated 2 million users affected by this security breach.

Recommendations

If not already enabled, turn on the compromised credentials rule for all relevant entities and ensure relevant emails are entered for those entities, or reach out to [email protected] for assistance
If one of your entities receives an alert, ZeroFOX recommends immediate password changes for the affected account
Enable 2-factor authentication for all of your organizational accounts to help mitigate phishing and credential stuffing attacks

Details

PropTiger is an independent real estate advisor with a pan-India presence, which has around 500 relation managers spread across the country. This breach contained a decent amount of personal information, including things like IP addresses, passwords which were base64 encoded MD5 hashes, birthdates, and names.

Figure 1. Raidforums posting for PropTiger dump