2 min read

Utah Gun Exchange Confirms Data Breach after Bad Actors Publishes Stolen Customer Records Online

Alina BÎZGĂ

August 20, 2020

Utah Gun Exchange Confirms Data Breach after Bad Actors Publishes Stolen Customer Records Online

Earlier this month, datasets containing over 240,000 records of the Utah Gun Exchange website were posted openly on a popular hacking forum. In total, 195,000 user records for the utahgunexchange.com and 45,000 records for their video, site UGETube, were exposed.

Researchers analyzing the data also spotted two additional stolen databases belonging to a Utah-based hunting site (muleyfreak.com) and herbs site (deepjunglekratom.com), both linked to the Amazon cloud server that housed the data for the popular gun exchange site.

Although the exposed data may vary depending on the website, email addresses, login names and hashed passwords are present in each data leak.

Utah Gun Exchange did not immediately react to the news, but earlier this week, it published a data breach statement informing customers about the incident.

“We have recently learned of an attack that affects you as our users,” the notification reads. “Specifically, we learned that Utah Gun Exchange and UGETube were the target of an attack that resulted in the exposure of some of your information.”

The letter underlines that most the stolen information is publicly available when posting a listing on their website, and that no financial information was part of the exposed data.

“All transaction information is handled directly through PayPal using their secure and internal systems,” the company said. “UGE Tube and Utah Gun Exchange do not see or handle any financial information including credit/debit card numbers that are entered in during the purchase process. Therefore transactional information such as credit/debit card or other such financial data was not part of the data compromised.”

However, stolen hashed passwords can have serious consequences for users. Any bad actor who downloaded the leaked data from the forum could try to decrypt user passwords, and consequently take over accounts that share the same login credentials.

It”s recommended for all users to change the login password for utahgunexchange.com, and any other online account that shares the same username and password combination. Utah Gun Exchange is also asking its users to look out for phishing attacks and inform the business of any suspicious communication.

As a result of the data breach, “Utah Gun Exchange and UGETube took steps to remove the offending code and have identified the vulnerability,” and are committed to reinforcing their security to prevent similar incident in the future.

Data breaches appear to be common events these days. Find out more about how you can regain control of your personal information with Bitdefender”s Digital Identity Protection.

tags


Author



Right now

Top posts

Ultimate Privacy Guide for Your Facebook Account

Ultimate Privacy Guide for Your Facebook Account

August 31, 2021

6 min read
7 Signs It’s Time to Use Parental Controls On Your Family’s Devices

7 Signs It’s Time to Use Parental Controls On Your Family’s Devices

August 27, 2021

2 min read
Your Netflix Account May Be on Sale on Darkweb. Protect It

Your Netflix Account May Be on Sale on Darkweb. Protect It

August 13, 2021

3 min read
E-mails claiming your computer was hacked and your privacy exposed - what you need to know (spoiler: you can relax - they’re bluffing)

E-mails claiming your computer was hacked and your privacy exposed - what you need to know (spoiler: you can relax - they’re bluffing)

July 29, 2021

5 min read
Watch Out for These Ongoing Bank of America Phishing Campaigns Targeting Customers in the US

Watch Out for These Ongoing Bank of America Phishing Campaigns Targeting Customers in the US

July 16, 2021

3 min read
How to protect yourself against cyberstalking

How to protect yourself against cyberstalking

July 06, 2021

2 min read

FOLLOW US ON

SOCIAL MEDIA


You might also like

Gamers Should Still Take Precautions Despite No Evidence Of User Compromise in Electronic Arts Data Breach Gamers Should Still Take Precautions Despite No Evidence Of User Compromise in Electronic Arts Data Breach
Alina BÎZGĂ

September 16, 2021

3 min read
Have you fallen victim to a data breach? Follow these six steps to protect against possible side effects Have you fallen victim to a data breach? Follow these six steps to protect against possible side effects
Alina BÎZGĂ

September 14, 2021

3 min read
7 Ways to Effectively Secure Your Digital Identity 7 Ways to Effectively Secure Your Digital Identity
Alina BÎZGĂ

September 13, 2021

4 min read