Paul Holland

Cyber and Information Security Professional, wanting to educate people about security, CISSP. Comments are my opinion and not my employers.

[Have I Been Pwned @haveibeenpwned]

New stealer log corpus: A collection of hundreds of millions of stealer log records containing 56M unique email addresses has been added. The data also contained 124M unique passwords added to Pwned Passwords. 86% were already in @haveibeenpwned. More: https://t.co/7pNsaKvJU6

[Have I Been Pwned @haveibeenpwned]

New breach: Berkadia was targeted by a ShinyHunters "pay or leak" extortion campaign in March. They subsequently published over 300k unique email addresses allegedly taken from the company's Salesforce instance. 76% were already in @haveibeenpwned. More: https://t.co/7eTZlsbnF9

[Have I Been Pwned @haveibeenpwned]

New breach: The University of Nottingham was targeted in a ShinyHunters extortion campaign exposing 455k email addresses this week. Data included name, address, phone, ethnicity, disability & academic enrolment info. 47% were already in @haveibeenpwned https://t.co/F3EOQ3mTlc

[Have I Been Pwned @haveibeenpwned]

New breach: Baker Distributing had 103k unique email addresses allegedly exposed after appearing on the ShinyHunters "pay or leak" site. The data was mostly corporate contact info including names, addresses and phones. 50% were already in @haveibeenpwned: https://t.co/PmfWpHKRie

[Have I Been Pwned @haveibeenpwned]

New breach: BCD Travel was targeted in a ShinyHunters extortion campaign that published 396k email addresses this week. Other data included name, address, phone, job title and support tickets. 28% were already in @haveibeenpwned. Read more: https://t.co/tY9awopINM

[Have I Been Pwned @haveibeenpwned]

New breach: DentaQuest was targeted by a ShinyHunters extortion campaign that saw 2.6M unique email addresses published last weekend. Data also included name, phone, address and for some records, Medicaid ID. 66% were already in @haveibeenpwned. More: https://t.co/AG1wWFCIYj

[Have I Been Pwned @haveibeenpwned]

New breach: Edmunds was listed by ShinyHunters as allegedly breached in Jan, with the data later published online. It contained 178k unique email addresses, usernames, IP addresses, phone numbers and passwords. 91% were already in @haveibeenpwned. More: https://t.co/zoS1LXeN1G

[Have I Been Pwned @haveibeenpwned]

New breach: The Atlas Menu GTA V and CS2 cheat service had 64k accounts breached yesterday. Data includes email and IP addresses, usernames, passwords stored as bcrypt hashes and support tickets. 49% were already in @haveibeenpwned. Read more: https://t.co/rBW20cB1EH

[Have I Been Pwned @haveibeenpwned]

New breach: Charter Communications was named in a ShinyHunters "pay or leak" extortion campaign last week after which 4.9M unique email addresses along with name, phone number and physical address were published. 68% were already in @haveibeenpwned. More: https://t.co/gS1ouS5doI

[Have I Been Pwned @haveibeenpwned]

New breach: Kemper was targeted by ShinyHunters last month in an extortion campaign resulting in 269k email addresses being published. Data also included names, phone numbers, addresses and partial card data. 53% were already in @haveibeenpwned. More: https://t.co/vd9GfPqu6V

[Have I Been Pwned @haveibeenpwned]

New breach: Mytheresa was targeted by ShinyHunters in an extortion campaign last month. The leaked data contained 84k email addresses along with name, address, phone, purchase and partial card data. 97% were already in @haveibeenpwned. Read more: https://t.co/BH8dBfg6sg

[Have I Been Pwned @haveibeenpwned]

New breach: Ameriprise was the victim of a ShinyHunters extortion campaign in March. The published data contained 500k email addresses along with names, phone numbers, physical addresses and employer info. 65% were already in @haveibeenpwned. Read more: https://t.co/6eN7fQtZUs

[Have I Been Pwned @haveibeenpwned]

New breach: 7-Eleven was targeted by the ShinyHunters extortion group last month, with 185k email addresses related to franchisees impacted. Data also included name, physical address, phone number and DoB. 53% were already in @haveibeenpwned. Read more: https://t.co/NzS7nAME6V

[Have I Been Pwned @haveibeenpwned]

New breach: The Dragonica Lunaris private server suffered a breach in December which exposed 126k email addresses, usernames, dates of birth and bcrypt password hashes. 69% were already in @haveibeenpwned. Read more: https://t.co/V5rPrGZ2a0

[Have I Been Pwned @haveibeenpwned]

New breach: The Windows93 parody site suffered a breach of its Myspace93 sub-site in 2021. The breach exposed 46k email and IP addresses, usernames and plain text passwords. 70% were already in @haveibeenpwned. Read more: https://t.co/RguvxD6OyL

[Have I Been Pwned @haveibeenpwned]

New breach: Data allegedly taken from CTT, Portugal's postal service, appeared on a hacking forum last month. It contained 468k unique email addresses, along with name, phone number and parcel tracking number. 55% were already in @haveibeenpwned. More: https://t.co/8qusIrlSep

[Have I Been Pwned @haveibeenpwned]

New breach: Abrigo was targeted by ShinyHunters last month, who subsequently published over 700k unique email addresses allegedly taken from their Salesforce instance. Data also included business contact info. 57% were already in @haveibeenpwned. More: https://t.co/BrSxpolwAb

[Have I Been Pwned @haveibeenpwned]

New breach: Canada Life was named as a ShinyHunters victim last month, after which data containing more than 200k email addresses was published. The incident also impacted name, phone number and physical address. 47% were already in @haveibeenpwned. More: https://t.co/F3V3idflpH

[Have I Been Pwned @haveibeenpwned]

New breach: Cushman & Wakefield was named as a ShinyHunters victim last week, after which mostly corporate contact records were published. Impacted data included email address, job title and company address. 21% were already in @haveibeenpwned. More: https://t.co/3knBrWjEbg

[Have I Been Pwned @haveibeenpwned]

New breach: Zara was named as a ShinyHunters victim last month, after which data containing 197k unique email addresses was published. Impacted data included customer support records, product SKUs and order IDs. 60% were already in @haveibeenpwned. More: https://t.co/0hIQbqoBCk