Hacker Breaches Dozens of Sites, Puts 127 Million New Records Up for Sale
Package 1: Databases From 16 Compromised Websites On Sale
In the first round, the hacker who goes by online alias "gnosticplayers" was selling details of 617 million accounts belonging to the following 16 compromised websites for less than $20,000 in Bitcoin on dark web marketplace Dream Market:
Dubsmash — 162 million accounts
MyFitnessPal — 151 million accounts
MyHeritage — 92 million accounts
ShareThis — 41 million accounts
HauteLook — 28 million accounts
Animoto — 25 million accounts
EyeEm — 22 million accounts
8fit — 20 million accounts
Whitepages — 18 million accounts
Fotolog — 16 million accounts
500px — 15 million accounts
Armor Games — 11 million accounts
BookMate — 8 million accounts
CoffeeMeetsBagel — 6 million accounts
Artsy — 1 million accounts
DataCamp — 700,000 accounts
Package 2: Hacked Databases From 8 More Websites On Sale
While putting the second round of the stolen accounts up for sale on the Dream Market—one of the largest dark web marketplaces for illegal narcotics and drug paraphernalia—the hacker removed the collection of the first round to avoid them from getting leaked and land on security initiatives like Google's new Password Checkup tool.
Gnosticplayers told The Hacker News in an email that the second round listed stolen data from 127 million accounts that belonged to the following 8 hacked websites, which was up for sale for $14,500 in bitcoin:
Houzz — 57 million accounts
YouNow — 40 million accounts
Ixigo — 18 million accounts
Stronghold Kingdoms — 5 million accounts
Roll20.net — 4 million accounts
Ge.tt — 1.83 million accounts
Petflow and Vbulletin forum — 1.5 million accounts
Coinmama (Cryptocurrency Exchange) — 420,000 accounts