Threat Actor: Unknown | Unknown
Victim: Catch News | Catch News
Price: $1,400
Exfiltrated Data Type: Personal and transactional details
Additional Information :
- The data breach occurred on May 23, 2024.
- Over 2 million users’ sensitive information has been exposed.
- The leaked dataset is 41 GB in size.
- The compromised information includes user IDs, names, email addresses, city IDs, passwords, phone numbers, account status, OTP details, and various metadata.
- Both encrypted and plain text versions of passwords were included in the dump.
- Additional sensitive data such as gender, age, and session management tokens were also exposed.
- The breach poses risks of identity theft, phishing attacks, and other forms of cyber exploitation.
In a significant cybersecurity incident, Catch News, a prominent English news website known for breaking news headlines and current stories from India, has suffered a major data breach. The breach, which occurred on May 23, 2024, has resulted in the exposure of sensitive information belonging to over 2 million users. The information is being offered for a price of $1,400.
The leaked dataset, totaling 41 GB, includes a wide range of personal and transactional details. The compromised information encompasses user IDs, names, email addresses, city IDs, passwords, phone numbers, account status, OTP (One Time Password) details, and various metadata such as creation and update timestamps. Alarmingly, both encrypted and plain text versions of passwords were included in the dump, significantly heightening the risk of identity theft and unauthorized account access.
The breach also revealed additional sensitive data, such as gender, age, and tokens used for session management. This comprehensive exposure of user data poses serious risks to the affected individuals, including identity theft, phishing attacks, and other forms of cyber exploitation.
Original Source: https://dailydarkweb.net/threat-actor-claims-to-have-breached-catch-news-2-million-users-data-at-risk/