Chatbooks

Three more high-profile databases were being offered for sale by the same group claiming the Tokopedia and Unacademy breaches out of which one is photo print services ChatBooks.

The other two were meal kit delivery service, Homechef, and Chronicle.com, a news source for higher education.

Together, the three databases count user records and passwords from 26 million accounts.

The post for the ChatBooks database was published on May 3 and the asking price of hackers was $2,000 for 15 million rows of data & in case of default, they highlighted their plan to sell it.

The database has email addresses, passwords hashed with the SHA-512 function, social media access tokens, and some PII.

Source: https://www.bleepingcomputer.com/news/security/hackers-sell-stolen-user-data-from-homechef-chatbooks-and-chronicle/

TPRM report: https://scoringcyber.rankiteo.com/company/chatbooks

"id": "cha1357301222",
"linkid": "chatbooks",
"type": "Data Leak",
"date": "05/2020",
"severity": "85",
"impact": "3",
"explanation": "Attack with significant impact with internal employee data leaks"

{'affected_entities': [{'customers_affected': 15000000,
                        'industry': 'Consumer Services',
                        'name': 'ChatBooks',
                        'type': 'Photo Print Services'},
                       {'industry': 'Food and Beverage',
                        'name': 'Homechef',
                        'type': 'Meal Kit Delivery Service'},
                       {'industry': 'Media and Publishing',
                        'name': 'Chronicle.com',
                        'type': 'News Source for Higher Education'}],
 'data_breach': {'number_of_records_exposed': 26000000,
                 'type_of_data_compromised': ['Email addresses',
                                              'Passwords hashed with SHA-512',
                                              'Social media access tokens',
                                              'PII']},
 'date_publicly_disclosed': '2020-05-03',
 'description': 'Three high-profile databases were offered for sale by the '
                'same group claiming the Tokopedia and Unacademy breaches. The '
                'affected companies include photo print services ChatBooks, '
                'meal kit delivery service Homechef, and Chronicle.com, a news '
                'source for higher education. Together, the databases count '
                'user records and passwords from 26 million accounts.',
 'impact': {'data_compromised': ['Email addresses',
                                 'Passwords hashed with SHA-512',
                                 'Social media access tokens',
                                 'PII']},
 'motivation': 'Financial Gain',
 'title': 'Data Breach of ChatBooks, Homechef, and Chronicle.com',
 'type': 'Data Breach'}