Malicious actors leak 70 million records from US Criminal database
A US criminal database supposedly containing 70 million rows of sensitive personal data has been posted on a leak forum.
Image by Shutterstock.
A US criminal database supposedly containing 70 million rows of sensitive personal data has been posted on a leak forum.
The sample provided includes crime categories and offenses, such as theft, possession of meth, or burglary, together with personal details. The sample includes full names, addresses, dates of birth, aliases, conviction dates, sentences, and more.
However, the actual data, according to hackers, contains many more fields, including Social Security numbers.
The database in CSV format was posted online by a notorious threat actor, USDoD, who has seemingly migrated from the FBI-seized BreachForums to another illicit leak site. The breach itself was attributed to threat actor SXUL.
🚨MAJOR DATA BREACH🚨Notorious threat actors, @EquationCorp and SXUL, have allegedly breached 70 Million rows of data related to a Criminal database.#DarkWeb #Cybersecurity #Security #Cyberattack #Cybercrime #Privacy #Infosec
undefined Dark Web Informer (@DarkWebInformer) May 19, 2024
Compromised Data: Fulltexts… pic.twitter.com/BYB65GgV2C
More from Cybernews
Sainsbury’s installs more facial rec tech in stores: Should shoppers be worried?
"Phantom squatting” uses AI hallucinated domains for cyber attacks
What they’re doing to gamers is a robbery in broad daylight
Irish parliament expands Microsoft use, despite the EU’s efforts to ditch it
Can government AI actually scrub UAP footage from the internet?
The EU and Apple CEO Tim Cook held "constructive" talks after their Siri AI dispute in Europe
They claim that the database size is 22GB when uncompressed and 3GB when compressed, and the data spans from 2020 to 2024.
Cybernews has not yet confirmed whether the data is genuine, and the exact source of the database is still unknown.
“Needless to say, having the criminal information leaked could have a tremendous impact, not only on the listed individuals but also on the justice system,” Malwarebytes Labs warns in a blog post.
“USDoD is a high-profile player in this field, closely associated with ‘Pompompurin,’ the operator of the first iteration of data leak site BreachForums. USDoD is said to have plans to set up a successor to the second iteration of BreachForums, which was recently seized by law enforcement. Releasing this database may be USDoD’s way to round up some interested users,” Malwarebytes Labs said.
Following the BreachForums seizure, USDoD announced a new, rebranded version of a hacker marketplace called “Breach Nation.”