PrivacySignal
Analysis ← Front page
Breach

2013 breach at Russian cybercrime forum resurfaces with millions of victims’ credentials

DataBreaches.net · · International · Data Breaches

A 2013 data breach of YouHack, a Russian-language cybercrime forum, has been newly cataloged by Have I Been Pwned, exposing 7.2 million unique email addresses. The dataset includes login credentials of roughly 107,000 forum members as well as millions of stolen credentials they had collected from other victims.

Why this matters: This one cuts in two directions. The forum members who got exposed were themselves criminals collecting other people's credentials — not much sympathy there. But the millions of victims whose stolen data was posted on that forum are exposed all over again, more than a decade later. If your credentials were caught in an old breach, they may now be freshly searchable. Check Have I Been Pwned. Old breaches do not age out. They resurface when someone finally catalogs them.

Who should care: Cybersecurity · Privacy officers · Administrators

#breach
Read the original at DataBreaches.net → Browse the archive

This summary is AI-assisted and may contain errors. It is an original briefing to help you gauge significance quickly — not a reproduction of the source. Always read the linked original before relying on it. See our methodology.

Analysis

All analysis →

Weekly Editorial Analysis from Experts and Editors

Logged Is Not Authorized

Georgia law restricts police use of license plate data to law enforcement purposes. A new lawsuit alleges deputies searched a man's vehicle five times while he was suing their sheriff. Two recorded reasons were "info" and "37." The system accepted both.

· 6 min read Read →
Deep Signal · Part I of III

The Algorithm Said So

Federal rulemakers are deciding what to do when artificial intelligence produces the kind of conclusion that once required an expert. They disagree about how to regulate it. They also disagree about whether the problem has arrived.

· 10 min read Read →

Related stories

Breach
BleepingComputer · · International

Active ScreenConnect attacks breach MSPs, impact dozens of organizations

ConnectWise is investigating an active malware campaign targeting managed service providers (MSPs) that uses compromised ScreenConnect environments to deploy rogue remote-access clients to customer devices. [...]

Who should care: Cybersecurity · Privacy officers · Administrators

#breach#security Read original →
Breach
DataBreaches.net · · International

AU: Hacker claims to have sold stolen exams to students — but marked them for identification purposes?

Aimee Edwards reports: Victoria’s Year 12 exams have been thrown into turmoil after the state’s curriculum and assessment authority website was hacked. A bizarre message appeared on the Victorian Curriculum and Assessment Authority (VCAA) website on Wednesday evening, with the hacker mocking the authority’s security and claiming to have obtained and distributed this year’s exam papers....

Who should care: Cybersecurity · Privacy officers · Administrators

#breach Read original →
Breach
BleepingComputer · · International

Notion says Fireworks breach exposed customer AI chat transcripts

Notion disclosed that a breach at Fireworks AI, a third-party provider powering Notion's AI features, exposed chat transcripts from a limited number of customer workspaces. The incident originated outside Notion's own infrastructure.

Who should care: Cybersecurity · Privacy officers · Administrators · General readers · AI governance · Policy

#breach#ai Read original →
Breach
Microsoft Threat Intelligence · · International

The global socket: how threat actors are weaponizing GSocket for stealthy C2

Threat actors are deploying GSocket on compromised Linux servers to keep encrypted remote access after the original vulnerability is patched. Learn how to detect, investigate, and remediate this activity. The post The global socket: how threat actors are weaponizing GSocket for stealthy C2 appeared first on Microsoft Security Blog.

Who should care: Cybersecurity · Privacy officers · Administrators

#breach#security Read original →
Breach
Krebs on Security · · International

Who Runs the Ransomware Group Qilin?

The cybercrime group Qilin has emerged as the world's most active ransomware affiliate program, claiming at least 365 victim organizations in the past three months alone. But even top Russian hackers make operational security mistakes, and the administrator of Qilin has made a few key missteps over the last decade that all point to a 36-year-old man living in St. Petersburg, Russia.

Who should care: Cybersecurity · Privacy officers · Administrators

#breach#security Read original →