Data of 538 million
107 million records include personal data and basic account information such as the user ID, number of
The huge amount of data is available for 0.177 Bitcoin, approximately USD 1032.
“Internet users found that 538 million Weibo user records are being sold on dark web marketplace. 107 million of the whole leaked personal data have basic account information, including user ID, number of
The presence in the dump of not public users’ details, including gender and location, suggests the hackers had access to the company database.
The ads published by the sellers claim that the data were stolen from Weibo in mid-2019.
The company confirmed that the data were obtained in 2019 due to credential stuffing attacks and other information gathered online. The explanation provided by the company is not convincing because the dump offered for sale doesn’t include users’ passwords.
“Phone numbers were leaked due to brute-force matching in 2019 and other personal information were
“Don’t be credulous. Both password fields and Know Your Customer (KYC) data fields are not shown in the description. Don’t worry too much. Good night.” Luo added.
The seller also shared samples of the data that are legitimate.
The Chinese company already notified authorities about the incident, the investigation is still ongoing.
(SecurityAffairs – Weibo, data Dark web)