Cyber Incident Victim: ModaOperandi.com
Date:
Dec 2020
Location:
United States of America
Summary
ModaOperandi.com was among 26 companies impacted by a data breach where stolen user records were marketed for sale on a hacker forum. The incident involved a broker offering 368.8 million combined records, with the company's 1.2 million user records listed as previously disclosed. This breach was part of a broader pattern where threat actors targeted multiple organizations, exfiltrating data for illicit sale. While specific details of ModaOperandi's compromised data types weren't provided in the article, the company's inclusion in the broker's listing confirmed its victim status alongside other entities whose breaches had been publicly acknowledged.
| CIA Posture | Motives | Tactics, Techniques & Procedures |
|---|---|---|
| Available to members | 1 motive | 1 technique |
| Threat Actors | Type | Location |
|---|---|---|
| 0 actors | Available to members | Available to members |
Description
On December 31, 2020, BleepingComputer reported a data breach broker advertising stolen user records from twenty-six companies on a hacker forum, totaling 368.8 million compromised accounts. ModaOperandi.com was listed among the affected entities, with 1.2 million user records offered for sale. The broker’s post indicated ModaOperandi’s breach had been previously disclosed, linking to a prior BleepingComputer article about a separate incident where a hacker sold 550 million records across multiple platforms. The forum post appeared the preceding Friday, though the exact date of ModaOperandi’s compromise remained unspecified in available reporting. No pricing details were provided for ModaOperandi’s dataset, unlike Teespring ($3,800–$4,000), MyON ($2,800), and Chqbook ($1,800), which had assigned values.
BleepingComputer’s investigation confirmed eight companies in the broker’s list represented new breaches, but ModaOperandi was not among these newly disclosed incidents. The article did not specify ModaOperandi’s response to the sale or whether the company had issued a breach notification. In contrast, MyON acknowledged a July 2020 intrusion while denying exposure of sensitive student data, and Chqbook disputed the breach entirely. Teespring had quietly disclosed a June 2020 incident via a noindexed webpage, delaying public awareness until December 2020. The report noted historical legitimacy in such broker-sold datasets, urging users of all listed platforms—including ModaOperandi—to reset passwords and monitor for phishing. No further technical details regarding ModaOperandi’s breach methodology, data types exposed, or attacker attribution were provided in the source material.