Third batch containing 93 million account credentials stolen from 8 companies put up for sale on the Dark Web

• Following the second batch of 127 million accounts stolen from 8 companies, the third batch containing 93 million accounts stolen from 8 companies was made available for sale on Dream Market marketplace.
• Each listing the seller posted in Dream Market was accompanied by a message demanding fair justice for Goerge Duke-Cohan who was arrested and charged in a federal indictment, and warning to release more data otherwise.

The seller ‘gnosticplayers’ is back with a collection of 93 million stolen account credentials from 8 companies. This is the third batch made available for sale by gnosticplayers in the Dream Market marketplace which is worth 2.6249 bitcoin amounting to $9,400.

Earlier, the first batch containing almost 620 million stolen accounts from 16 companies and the second batch of 127 million stolen accounts from 8 companies were put up for sale on Dream Market.

Dream Market is a Dark Web marketplace where criminals sell an assortment of illegal products, such as user data, drugs, weapons, malware, and more.

What data was involved in the stolen accounts?

The data involved in the stolen accounts included first and last names, sex, phone numbers, location addresses, email addresses, usernames, passwords, SHA1 encrypted password, password salt, IP addresses, login logs, API keys, company information, banking information, PayPal details, Facebook IDs, and more.

Eight companies affected

The stolen accounts belonged the following 8 companies,

1. Legendas.tv - 3.86 million data worth 0.35 bitcoin
2. Jobandtalent - 11 million data worth 0.4995 bitcoin
3. Onebip - 2.6 million data worth 0.2626 bitcoin
4. StoryBird - 4 million data worth 0.2334 bitcoin
5. StreetEasy - 1 million data worth 0.175 bitcoin
6. GfyCat - 8 million data worth 0.35 bitcoin
7. ClassPass - 1.5 million data worth 0.204 bitcoin
8. Pizap - 60.8 million data worth 0.583 bitcoin

The breached companies belong to various sectors such as movie sharing service, job portal, mobile payment platform, storytelling service, real estate, GIF image hosting, fitness service, and online photo editor.

Message posted along with listings

Each listing the seller posted in Dream Market was accompanied by a message demanding fair justice for Goerge Duke-Cohan who was arrested and charged in a federal indictment, and warning to release more data otherwise.

Goerge Duke-Cohan is a member of the Apophis Squad who was arrested and charged in a federal indictment with making false threats to schools and other institutions and launching DDoS attacks on websites.

“George Duke-Cohan is a young and talented boy, instead of giving him a chance, the UK govt sends him to prison for three years. Now, he's been told by the American government, that he faces 65 years for the offense he was already sentenced to three years in the UK. It means he will be judged twice ??

May this upcoming release of dumps serve as a reminder:

When countries claim to respect their citizens, they have duty protect them. I wouldn't be surprised whether George Duke-Cohan ends his life, the UK gov already destroyed him and doing this is like sentencing him to death. If he is not given a fair justice during the upcoming days, weeks, years, more data will be released....,” the message read, ZDNet reported.

The seller takes credit for the breaches

The seller ‘gnosticplayers’ admitted being responsible for the hacks and denied being just an intermediary. The seller noted that he plans to sell over one billion account credentials and then disappear with the money.

“My two main goals are: -money -downfall of American pigs. New leaks are coming, including one from a cryptocurrency exchange,” gnosticplayers told ZDNet.