Breach Disclosure: LifeBear

Gnosticplayers has returned with a fourth round of breached data, and among the companies impacted was LifeBear, a Japanese scheduling app. The breached data included 3.67 million records containing emails, MD5 hashed passwords, usernames, event details and application settings. LifeBear confirmed this breach on the 20th of May, with a statement "...it has been revealed that there is a high possibility that the account information was acquired due to hacking damage caused by unauthorized access from a third party." which can be viewed on their blog.

Recommendations

Enable 2-factor authentication for all of your organizational accounts to help mitigate phishing and credential stuffing attacks
If not already enabled, turn on the compromised credentials rule for all relevant entities and ensure relevant emails are entered for those entities, or reach out to [email protected] for assistance
If one of your entities receives an alert, ZeroFOX recommends immediate password changes for the affected account

Details

In addition to LifeBear, Gnosticplayers has also announced the following other companies were included in this latest breach dump:

GameSalad (Game Development Platform)
Estante Virtual (Brazillian Book Shop)
Coubic (Scheduling Software)
Bukalapak (Indonesian e-commerce Site)
YouthManual.com (Indonesian Youth Student and Career Site)

While Gnosticplayers initially tried to sell this data on dark web marketplaces for ฿0.2618 (~$2,300), a popular hacking site has made the database available for free.

Figure 1: Breached data offered for sale on a hacking forum.