Nova Poshta has been accused of leaking the personal information of 500,000 users to the dark web.
An unidentified person sold the personal data of Nova Poshta clients in the dark web, an encrypted area of the internet that can only be accessed by special software.
The seller had offered two databases.
The first has 500,000 records of clients, with their full names, phone numbers, city of residence, passport information and email address.
The second has 18 million records but with less information, only names and numbers.
The seller is charging Hr 1,500 ($55) for a copy of the database with 500,000 clients.
"id": "HOB11267622",
"linkid": "novaposhta",
"type": "Breach",
"date": "02/2018",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization's existence"