Data Breach Summary
In a concerning security breach, ezlive.biz, a platform for video conferencing and live streaming, experienced a significant compromise of sensitive information. This breach was detected by our diligent dark web scanning team at InsecureWeb on June 26, 2023. The responsible hacker, known as “sumo,” publicly disclosed the stolen data on the dark web forum “Cronos.”
The breach involved unauthorized access to a database containing substantial amounts of sensitive information from ezlive.biz. The compromised data includes user IDs, country IDs, order IDs, customer IDs, payment method IDs, reference numbers, payment gateway identifiers, providers, request IDs, transaction IDs, unique IDs, authorization codes, order amounts, received amounts, credit card details (name, number, bank, and country), status, remarks, and additional data.
Where and How?
This breach predominantly took place on the dark web forum “Cronos,” known for facilitating illicit activities, including the trade of stolen information and data breaches. The hacker, “sumo,” played a significant role in the unauthorized disclosure of the compromised data, which contained highly sensitive information associated with ezlive.biz.
Further investigation revealed that the breach specifically targeted the database of ezlive.biz, comprising critical user and transaction details. Unauthorized access granted the hacker access to sensitive information such as user IDs, country IDs, order IDs, customer IDs, payment details, and additional related data.
A Screenshot of the data can be found below:
Company Data Breach History
To the best of our knowledge, there is no known history of security breaches reported for ezlive.biz. However, this breach serves as a reminder of the evolving risks faced by video conferencing and live streaming platforms, emphasizing the need for robust security measures to safeguard sensitive user information.
ezlive.biz is actively addressing the breach, collaborating closely with cybersecurity experts to conduct a comprehensive investigation. Their objective is to strengthen security protocols, identify any vulnerabilities, and prevent future breaches that could compromise user data and erode trust in the platform.
Recommendations for Personal Data Protection
How Users Can Protect Their Information
To protect their personal information and accounts from being compromised, users should take the following steps:
– Change their passwords frequently, with a combination of letters, numbers, and symbols.
– Enable two-factor authentication whenever possible.
– Use unique passwords for each account, to prevent hackers from accessing multiple accounts with the same password.
– Be cautious of suspicious emails or messages, as they may contain phishing links that can compromise their accounts.
– Regularly monitor their accounts for any suspicious activity.
What is InsecureWeb?
InsecureWeb is a Dark Web monitoring service that keeps track of recent data breaches and tracks their impact by monitoring the darkest places of the internet. InsecureWeb notifies users and enterprises when their data has been found online and helps them mitigate the impact.