LiveAuctioneers

The Washington State Office of the Attorney General reported a data breach involving LiveAuctioneers affecting 38,523 residents. The breach occurred on June 19, 2020, due to a cyberattack that exploited a third-party software solution, leading to the exposure of user names, email addresses, and hashed passwords. The breach was discovered on July 11, 2020, and notification was provided on September 3, 2020.

Source: https://www.atg.wa.gov/data-breach-notifications | https://data.wa.gov/resource/sb4j-ca4h.json?id=10283

TPRM report: https://www.rankiteo.com/company/liveauctioneers

"id": "liv612072925",
"linkid": "liveauctioneers",
"type": "Breach",
"date": "6/2020",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': 38523,
                        'industry': 'Online Auction',
                        'name': 'LiveAuctioneers',
                        'type': 'Company'}],
 'attack_vector': 'Exploitation of third-party software',
 'data_breach': {'number_of_records_exposed': 38523,
                 'type_of_data_compromised': ['User names',
                                              'Email addresses',
                                              'Hashed passwords']},
 'date_detected': '2020-07-11',
 'date_publicly_disclosed': '2020-09-03',
 'description': 'The Washington State Office of the Attorney General reported '
                'a data breach involving LiveAuctioneers affecting 38,523 '
                'residents. The breach occurred on June 19, 2020, due to a '
                'cyberattack that exploited a third-party software solution, '
                'leading to the exposure of user names, email addresses, and '
                'hashed passwords. The breach was discovered on July 11, 2020, '
                'and notification was provided on September 3, 2020.',
 'impact': {'data_compromised': ['User names',
                                 'Email addresses',
                                 'Hashed passwords']},
 'references': [{'source': 'Washington State Office of the Attorney General'}],
 'title': 'LiveAuctioneers Data Breach',
 'type': 'Data Breach',
 'vulnerability_exploited': 'Third-party software vulnerability'}