7 ms·
> While the specifics of the data breach remain unclear, the trove of data was put up for sale on the dark web for $3.5 million in April, the complaint reads.
by throwup238 2y ago
> While the specifics of the data breach remain unclear, the trove of data was put up for sale on the dark web for $3.5 million in April, the complaint reads.
I guess they failed to sell it because links to the leaked data on usdod.io have been available on Breachforum/Leakbase for over a week now. Someone created a magnet link yesterday and it's fully seeded so speeds are fast.
The data in the breach is irreversibly public now.
- bhaney 2y ago> Someone created a magnet link yesterday Are you against simply sharing the infohash here? I'd like to download the leak to see what information it has on myself and my family, but I don't really relish the idea of signing up for a breachforums account and sifting though its posts if I can avoid it.
- flockonus 2y agofyi that is likely to be a crime, at the very least has been cases of websites being punished for linking to illegally distributed IP (even if not hosting it).
- bhaney 2y agoI'd be worried about legal repercussions if we were talking about the latest Disney movie, but this is merely the private information of a billion people. Never seen IP law give much of a crap about that before.
- ethbr1 2y agoPrivate information on people is Equifax's IP.
- Zuiii 2y agoA collection of facts is not and can not be copyrightable, especially when it was mechanically derived/collected (no human creativity). So, no, it is absolutely not "Equifax's IP".
- dtech 2y agoOnly in the US. In the EU and other jurisdictions is does have protection [1]. [1] https://en.wikipedia.org/wiki/Copyright_law_of_the_European_Union#Database_rights https://en.wikipedia.org/wiki/Copyright_law_of_the_European_...
- hulitu 2y agoYeah, in the EU it does have Palantir's protection. /s
- adolph 2y agoSo I could copyright my SSN in the EU and sue Equifax et al.?
- rjmunro 2y agoNot on an individual basis. If you collected a large number of them and someone copied them from you, then you could have a database right claim, which is sort of similar to copyright, but much less powerful. https://en.wikipedia.org/wiki/Database_right https://en.wikipedia.org/wiki/Database_right
- basch 2y agowhich has yet to leak. as far as we know, the equifax data never became public.
- Dalewyn 2y ago1 pirated Disney movie is a tragedy. 3,000,000,000 leaked Social Security Numbers is a statistic. -Joseph "Social Credit" Stalin ...Is it obvious I, as an American who can confirm my SSN (and whatever else) was leaked by this, sincerely couldn't care less because this is leak incident number 897165176548795647564576415671? That $10 UberEats gift card from CrowdStrike would be more valuable than another batch of Free Credit Monitoring(tm).
- rqtwteye 2y agoUberEats gift cards are the ultimate passive aggressive “fuck you”. To use them, you need to spend at least another 10 to actually get something
- jmprspret 2y agoIs this NPD's "IP" though? Is my personal information that company scraped, now that company's intellectual property?
- deleted 2y ago[deleted]
- LorenPechtel 2y agoWhere's the IP? It's like phone books--a collection of data, no creative content.
- lynndotpy 2y agoBitTorrent uses something called a "distributed hash table", for which there exist services to search it (btdig, etc). You can use one of those alongside the torrent name (NPD) to find it. I haven't downloaded it, but my understanding is that the data comes compressed and with a (weak) password.
- hypeatei 2y agoHere is a strongly encrypted base64 version to keep hackers out: bWFnbmV0Oj94dD11cm46YnRpaDozY2FhNzFmM2VjOGNiY2NjNmZjYTRmZWI3MTg1ZGEyYmFiMTQ5YmE3JmRuPU5QRCZ0cj11ZHA6Ly90cmFja2VyLm9wZW5iaXR0b3JyZW50LmNvbTo4MCZ0cj11ZHA6Ly90cmFja2VyLm9wZW50cmFja3Iub3JnOjEzMzcvYW5ub3VuY2U= Allegedly, the password (also base64 encrypted) is: aHR0cHM6Ly91c2RvZC5pby8=
- Aeolun 2y agoHas anyone been able to reverse this base64 encryption? Whatever am I going to do with this?
- acidburnNSA 2y agoIt can't be reversed, unfortunately. base64 has been peer proven as mathematically unhackable.
- meowface 2y agoSame for base16. That's why those pesky hash digests always use it.
- LadyCailin 2y agorot13 is way faster though.
- deleted 2y ago[deleted]
- harshreality 2y agoUsername checks out.
- jzemeocala 2y agodo you still hang out with CrashOverRide?
- eks391 2y agoYou can check to see if you were in the breach here: https://npd.pentester.com/search https://npd.pentester.com/search This will save you the effort of a 30min search per `grep` on the original breached files.
- mr_wiggz 2y ago[dead]
- qingcharles 2y agoDo you know if the Rhysida ones get torrented? https://www.ransomlook.io/group/rhysida https://www.ransomlook.io/group/rhysida
- 1vuio0pswjnm7 2y agoNow everyone just needs to send their email addresses to HIBP, i.e., email HIBP, so he can connect these identities with IP addresses and working email accounts. For peoples' protection of course. After everyone "has been pwned" then there is no need for HIBP. The answer is always "yes". Yet I am certain sites like "HIBP" will never go away. Something about email marketing. Some HN commenter(s) will inevitably try to defend HIBP. But this comment also refers to sites "like HIBP" that use data breach dumps opportunistically to generate web traffic, collect IP and email addresses. Some folks just do not see what is wrong with the idea.
- dtquad 2y agoHIBP has been audited by independent 3rd parties.
- deleted 2y ago[deleted]
- MattGaiser 2y ago> After everyone "has been pwned" then there is no need for HIBP. You can be repeatedly pwned with updated/different information. It is not a one and done thing.
- vlovich123 2y agoAnd people are born and die
- lazide 2y agoAllegedly /s
- 1vuio0pswjnm7 2y agoUsing data breach dumps to get web traffic and IP/email addresses under the guise of "helping" is lame. Then partnering with so-called "tech" companies that collect data as a "business". Data collection is the cause of the problem not the solution.
- aa_is_op 2y agoNobody's gonna pay that much money for it when you can get it from ad companies for pennies