Data Breach Summary
InsecureWeb, a company dedicated to scanning the dark web in search of security breaches, has detected a breach in go3gift.com, an online gift card marketplace. The breach occurred in May 2023 and was posted by zxcv16 on the website Nulled. A total of 107 MB of customer data was stolen, including sensitive information such as client IDs, user names, passwords, and tax IDs.
Where and How?
The security breach was found in a Dark Web forum and was posted on Nulled.to. It is unclear how the hacker was able to breach go3gift’s security measures, but it is suspected that they used a SQL injection attack to gain unauthorized access to the website’s database.
A Screenshot of the data can be found below:
%20SQL%20go3gift.com%20Leaked%20by%20zxcv16%2C%2005-29-2023.png)
Company Data Breach History
This is not the first time go3gift.com has suffered a data breach. In 2021, the company suffered a similar breach where customer data was stolen and posted on the dark web. The company claimed to have strengthened its security measures after the first breach, but it appears that the measures were not enough to prevent a second breach.
Go3gift appears to be an online gift card marketplace that allows users to purchase and send gift cards from a variety of retailers and brands. It is unclear how many customers were affected by the breach, but it is likely that the stolen information will be used for identity theft and other fraudulent activities.
Recommendations for Personal Data Protection
How Users Can Protect Their Information
To protect their personal information and accounts from being compromised, users should take the following steps:
– Change their passwords frequently, with a combination of letters, numbers, and symbols.
– Enable two-factor authentication whenever possible.
– Use unique passwords for each account, to prevent hackers from accessing multiple accounts with the same password.
– Be cautious of suspicious emails or messages, as they may contain phishing links that can compromise their accounts.
– Regularly monitor their accounts for any suspicious activity.
What is InsecureWeb?
InsecureWeb is a Dark Web monitoring service that keeps track of recent data breaches and tracks their impact by monitoring the darkest places of the internet. InsecureWeb notifies users and enterprises when their data has been found online and helps them mitigate the impact.