A total of 15 breaches were found and analysed resulting in 5,465,343 leaked accounts containing a total of 15 different data types. The breaches found publicly and freely available included Simple Treasure Box, DivX Subtitles, Yandex Practicum, Crakians Leaks and Lending Tree. Sign in to view the full BreachAware Breach Index which includes, where available, reference articles relating to each breach.

SPOTLIGHT

We’ve seen a few interesting breaches floating around the web this week. First a leak which is making the rounds from a website were users upload films with subtitles in. Over 783k users were exposed, The data breach dates back to 2011 however it has just come into circulation. Dataset sets include username, email address and plain text passwords.

A strange little breach which is doing the rounds is a blog site located in Singapore. It seems to be one guy contributing to his own page with not much activity, however I bring up this breach because of the fairly large user-base.

An Australian furniture company suffered a data breach when a 100k of their credentials, which included email addresses, were dumped on a hacking forum. A range of datasets were compromised in the breach, such as hashed brycpt passwords and physical addresses. Apparently, their AWS services had been targetted resulting in this breach.

And finally, a threat actor has had a spat with Intelligence X when a complaint was sent to the registrar of the hacking forum which the threat actor is the administrator for. Apparently someone hacked his wife's Nike account with information they had gathered off said forum.