DriveSure Data Breach

DriveSure is known as a training platform that helps car stores to build consumer loyalty. It has numerous customers that subscribe to it is training and course material. They supply their brands, addresses, contact numbers and e-mails to the internet site.

In Dec 2020, DriveSure suffered an information breach which lead to 26GB of private information getting downloaded and distributed on a cracking forum. This kind of included 3 or more. 6 million unique emails, names, telephone numbers and physical addresses. Car or truck information was also uncovered including makes, models, VIN numbers and odometer readings.

The cyber-terrorist made the DriveSure info available for free on multiple hacking discussion boards, so it was freely accessible to anyone. The vpnversed.com/board-portal-increases-performance/ attackers left a 22GB folder which in turn contained DriveSure’s MySQL databases, revealing 91 sensitive databases.

PII was within the dump, along with damage claims, extended car details and dealer and warranty info. These were all prime with respect to exploitation by other hazard actors.

Above 93, 000 bcrypt hashed passwords were made public. Though stronger than SHA1 and MD5, bcrypt passwords can still be brute-forced when downloaded from a server, Risk Based Secureness explained.

Using a poor username and password can allow a great attacker to steal your computer data from the hardware, so it’s important to switch them at the earliest opportunity. In addition , the new good idea to wipe the hard drive on your computer system before getting rid of it to stop any info from simply being accidentally or maliciously exposed. You can do this employing a data break down application or setting up a fresh installation of the operating-system.