Drivesure, a car dealership service provider, was hit with a data breach last December that resulted in 26GB of personal information being downloaded and shared on hacking forums. The data breached included names address, addresses and telephone numbers of 3.2 million buyers, as well as emails and text messages between the clients of traders VINs of vehicles, as well as service records. More than 93, 000 Bcrypt hashed passwords were made public. Although bcrypt is believed to be stronger than older strategies like SHA1 and MD5, the hashes can still be hacked after they are downloaded, Risk Based Security reports.
In a long post on Raidforums, hacker “pompompurin” provided details of the leak of user information and files. This is unusual since hackers usually only share important segments or trimmed down versions of databases they’ve found.
According to CISO Magazine, the database was exposed because of a configuration error in an AWS bucket that was being used by the company. The AWS bucket had been left unprotected, which allowed anyone to gain access to the contents and data. This included over a million email addresses in plaintext, as were passwords encrypted with the bcrypt encryption method.
Drivesure users should be worried about the breach, since they could be a victim of fraud or identity theft if their data is stolen. Users of the site are advised to change their passwords as soon as they can. Also, they should think about changing their login details on other sites that use the same credentials.