You may have used drivesure to train your staff to attract and keep customers if you own a car dealership or work in the auto industry. Many customers gave their full names, addresses and phone numbers, as well as emails as well as vehicle VINs and service records to this service, and it’s possible that some of these accounts were hacked. The hackers made public the details on the Raidforums hacking forum, allowing it for free download.

The data dump was shared by a threat actor identified as « pompompurin, » according to Bleeping Computer news service. The attacker’s motive is unknown however, he appeared not to be after money because he uploaded the data in a slow manner and didn’t ask for any payments.

Moreover, the hacker also published the images of passports and identity documents belonging to journalists and volleyball players from all over the world in a folder marked « backup » and in a separate folder called « AccreditationPhotos. » Those photos could be used to phish and spear phishing attacks.

Security researchers combing the Internet for poorly secured databases have discovered an enormous database of http://vpnversed.com/board-portal-increases-performance/ data on 3.2 million DriveSure customers. The breach encapsulates 91 MySQL databases that contain extensive inventory and dealership details, revenue data, reports and claims and also PII and 93,063 hashed passwords in bcrypt.

The company claims it’s working with Microsoft to get the issue fixed. It’s unclear what the company’s chances of getting a patch to the many smaller systems that use the older version Accellion’s FTA.