A total of 12 breaches were found and analysed resulting in 2,010,497 leaked accounts containing a total of 19 different data types. The breaches found publicly and freely available included iUnlocker, Team Xecuter, Best Blackhat Forum, SBC Communications (URL Redirected) and OKRU. Sign in to view the full BreachAware Breach Index which includes, where available, reference articles relating to each breach.

SPOTLIGHT

The news that Twitter has been hacked takes the internet by storm, while crypto pokes its head above water. Several members of the team have been seeing a lot more 'leads' type leaks at the moment. Maybe it's the time of the year or all the threat actors are trying to squeeze just a little bit more out of their stolen data.

'Leads' leaks, in my opinion, are files posted on forums with the title "UK leads", for example, which contain a range of information like names, physical addresses, email addresses, and national insurance numbers (social security numbers), etc. This data won’t come from just one place; it will be a collection of UK users mixed up together in one file.

We’ve seen a big mobile operator in the UK have a section of their user base dumped online. We’re still in the process of verifying the data. A large number of datasets were in the breach. Geolocation, race, and mobile carriers were just a few of the datasets in the breach. I see mobile carriers as a good dataset for threat actors to use SIM swapping.

It's been a while since we commented on the flood of Russian data breaches. I know it's probably not everyone's favourite subject right now, but the data is real and the people whom it affects are real. A breach we picked up very recently is a very large shopping mall in Moscow, Russia. The classic datasets were in the database as well as full credit card numbers with names and physical addresses.