A phishing attack scored credentials for more than 50,000 Snapchat users along with their usernames and passwords.
The attack appeared to be connected to a previous incident that the company believed to have been coordinated from the Dominican Republic.
Snapchat had reset the majority of the accounts.
But for some period of time, thousands of Snapchat account credentials were available on a public website.
Source: https://www.theverge.com/2018/2/16/17017078/snapchat-phishing-attack-klkviral-dominican-republic
TPRM report: https://scoringcyber.rankiteo.com/company/snap-inc-co
"id": "sna1566622",
"linkid": "snap-inc-co",
"type": "Breach",
"date": "02/2018",
"severity": "60",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': 50000,
'industry': 'Social Media',
'name': 'Snapchat',
'type': 'Company'}],
'attack_vector': 'Phishing',
'data_breach': {'number_of_records_exposed': 50000,
'type_of_data_compromised': 'Usernames and passwords'},
'description': 'A phishing attack scored credentials for more than 50,000 '
'Snapchat users along with their usernames and passwords. The '
'attack appeared to be connected to a previous incident that '
'the company believed to have been coordinated from the '
'Dominican Republic. Snapchat had reset the majority of the '
'accounts. But for some period of time, thousands of Snapchat '
'account credentials were available on a public website.',
'impact': {'data_compromised': 'Usernames and passwords'},
'motivation': 'Credential theft',
'response': {'remediation_measures': 'Account resets'},
'threat_actor': 'Unknown actors believed to be coordinated from the Dominican '
'Republic',
'title': 'Snapchat Phishing Attack',
'type': 'Phishing'}