Data Breach Summary
On April 7, 2023, InsecureWeb discovered a massive data breach affecting the Pikabu.ru site, a popular social news website in Russia, with 14.7 MB of customer data leaked. The breach was posted by zxcv16 on the website Nulled. InsecureWeb, a security firm dedicated to scanning the dark web for security breaches, discovered the breach on the same day.
Where and How?
The compromised personal information includes usernames, email addresses, and passwords. The breach was posted on Nulled, a popular dark web forum that specializes in sharing stolen data. It is unclear how the data was obtained, but it is possible that the hackers used a phishing attack or exploited a vulnerability in Pikabu.ru’s security system.
A Screenshot of the data can be found below:
Company Data Breach History
This is not the first time Pikabu.ru has suffered a data breach. In 2021, the website suffered a similar attack resulting in the leak of over 100,000 customer records. The company has not released a statement regarding the recent breach. This site is working with cybersecurity experts to further investigate the incident and is taking steps to strengthen its security measures in order to prevent similar breaches from occurring in the future.
Recommendations for Personal Data Protection
How Users Can Protect Their Information
To protect their personal information and accounts from being compromised, users should take the following steps:
– Change their passwords frequently, with a combination of letters, numbers, and symbols.
– Enable two-factor authentication whenever possible.
– Use unique passwords for each account, to prevent hackers from accessing multiple accounts with the same password.
– Be cautious of suspicious emails or messages, as they may contain phishing links that can compromise their accounts.
– Regularly monitor their accounts for any suspicious activity.
What is InsecureWeb?
InsecureWeb is a Dark Web monitoring service that keeps track of recent data breaches and tracks their impact by monitoring the darkest places of the internet. InsecureWeb notifies users and enterprises when their data has been found online and helps them mitigate the impact.