Event-discovery application Peatix has disclosed a data breach, after ads for stolen user-account information were reportedly being circulated on Instagram and Telegram.
In a data breach notice to affected users, Peatix said it learnedthat user account data had been improperly accessed.
The compromised information includes names, email addresses,salted and hashed passwords, nicknames, preferred languages, countries and time zones had been compromised.
The company warned that bad actors could use the stolen information to contact affected users and try to collect further personal or financial information via phishing attacks.
Source: https://threatpost.com/breach-peatix-data-instagram-telegram/161560/
TPRM report: https://scoringcyber.rankiteo.com/company/peatix
"id": "pea2929523",
"linkid": "peatix",
"type": "Breach",
"date": "11/2020",
"severity": "100",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'industry': 'Event-discovery Application',
'name': 'Peatix',
'type': 'Company'}],
'customer_advisories': 'Data breach notice to affected users',
'data_breach': {'data_encryption': 'Yes',
'data_exfiltration': 'Yes',
'personally_identifiable_information': 'Yes',
'sensitivity_of_data': 'Medium',
'type_of_data_compromised': ['names',
'email addresses',
'salted and hashed passwords',
'nicknames',
'preferred languages',
'countries',
'time zones']},
'description': 'Event-discovery application Peatix has disclosed a data '
'breach, after ads for stolen user-account information were '
'reportedly being circulated on Instagram and Telegram. In a '
'data breach notice to affected users, Peatix said it learned '
'that user account data had been improperly accessed. The '
'compromised information includes names, email addresses, '
'salted and hashed passwords, nicknames, preferred languages, '
'countries and time zones had been compromised. The company '
'warned that bad actors could use the stolen information to '
'contact affected users and try to collect further personal or '
'financial information via phishing attacks.',
'impact': {'data_compromised': ['names',
'email addresses',
'salted and hashed passwords',
'nicknames',
'preferred languages',
'countries',
'time zones'],
'identity_theft_risk': 'High',
'payment_information_risk': 'Potential'},
'motivation': ['Financial Gain', 'Data Theft'],
'references': [{'source': 'Data Breach Notice'}],
'response': {'communication_strategy': 'Data breach notice to affected users'},
'title': 'Peatix Data Breach',
'type': 'Data Breach'}