Millions of Users Impacted by Gaming Company and Cryptocurrency Specialist Data Breach
Recently, over two million users of a gaming company and a cryptocurrency specialist have fallen victim to a large-scale data breach, compromising their personal information at the hands of cyber attackers.
GateHub Cryptocurrency Wallet Service
One of the affected parties is GateHub, a cryptocurrency wallet service, where 1.4 million user accounts were exposed and subsequently posted on a popular hacking forum. This breach comes after the company had previously acknowledged a breach in June, where hackers were said to have gained access tokens for 18,473 encrypted customer accounts.
GateHub took immediate action to disable access tokens once suspicious activity was detected, preventing further unauthorized access. As a preventive measure, the company is generating new encryption keys and re-encrypting sensitive information such as XRP ledger wallets secret keys for all accounts upon the next sign-in.
However, it seems that the extent of the breach was much larger than initially reported, with compromised data including email addresses, mnemonic phrases, wallet hashes, and passwords stored as bcrypt hashes.
EpicBot Data Breach
Additionally, data on 817,000 subscribers to RuneScape bot provider EpicBot was also uploaded to the same hacking forums from a breach that occurred in September. The compromised information includes usernames, email and IP addresses, and passwords stored as either salted MD5 or bcrypt hashes.
Security Concerns and Phishing Attacks
Jason Kent, hacker-in-residence at Cequence Security, has raised concerns about potential phishing attacks targeting users of both GateHub and EpicBot, especially with the upcoming Black Friday sales weekend. He warns that a list of cryptocurrency exchange customers could lead to targeted phishing attacks aimed at account takeover, potentially resulting in users losing their cryptocurrency investments.
As cyber attacks on cryptocurrency exchanges continue to rise, it is crucial for users to remain vigilant and take necessary precautions to protect their personal information and assets from falling into the wrong hands.
Stay informed and stay safe in the digital world.