GunAuction.com major data breach: email, password, name, address, birthday, and more.

[TapRackBang]

Just announced, from haveibeenpwned.com:

In December 2022, the online firearms auction website GunAuction.com suffered a data breach which was later discovered left unprotected on the hacker's server. The data included over 565k user records with extensive personal data including email, IP and physical addresses, names, phone numbers, genders, years of birth, credit card type and passwords stored in plain text. The leaked identities could subsequently be matched to firearms listed for sale on the website.

TechCrunch article covering the breach: https://archive.ph/GfSxV

 

[outrider58]

Previously started here:

https://www.mdshooters.com/threads/gunauction-com-hacked.273531/#post-7006074

 

[TapRackBang]

Thanks, but that's in the Water Cooler, where not everybody can see it.

(And I did search before posting. That thread did not show up.)

 

[outrider58]

Thanks, but that's in the Water Cooler, where not everybody can see it.

(And I did search before posting. That thread did not show up.)

 

[babalou]

yeah MDS search is like where's Waldo....

 

[Headedthere]

What a mess. I considered buying/selling online before, but could never feel that comfortable with it.

 

[TapRackBang]

Doesn't matter if you chose not to buy online. All companies you would buy from - even local-only stores - put your data online. Stores use computers to keep their books, process credit cards, manage customers. Most of those services are online now. And all of those stores are using Microsoft products (Windows, Office 365, Teams, etc) which are an open book to hackers. Can't be avoided anymore, even with cash in many instances.

So freeze your credit reports (all seven of them, not three), check them annually, don't reuse passwords anywhere, enable real 2-factor authentication (NOT text messages - that is useless), reconcile bank and credit card statements every month.

 

[Headedthere]

Agree with most of what you're saying. But adding gun purchases and sales to the data base is unique to the auction sites.

Also, for the most part (and I'm not a MS fanboy), MS products aren't the problem. It's the implemenation details, which are very different at each storefront/site.

 

[Docster]

Thanks, but that's in the Water Cooler, where not everybody can see it.

(And I did search before posting. That thread did not show up.)

Location doesn't matter if the Search is done correctly