Accuradio.com

Summary

Accuradio.com was among 26 companies whose user data was compromised and offered for sale by a data breach broker on a hacker forum, involving approximately 2.2 million records. The incident, part of a larger set of breaches totaling 368.8 million records, exposed user credentials and personal information, with historical patterns suggesting such sales typically involve legitimate stolen data. While some affected entities confirmed breaches or denied incidents, Accuradio's inclusion in the broker's list indicated prior public disclosure of the compromise, potentially enabling credential misuse or phishing campaigns targeting its users.

Motives

Detailed motive labels are available to members.

TTPs

Detailed technique labels are available to members.

Description

In December 2020, a data breach broker advertised the sale of stolen user records from twenty-six companies on a hacker forum, totaling 368.8 million records. Among these was Accuradio.com, listed with 2.2 million compromised user records. The broker’s post, discovered by BleepingComputer, included both previously disclosed breaches and eight new incidents. Accuradio’s breach had been previously identified, as indicated by a "Yes" marker linking to a Binary Defense report documenting its inclusion in ShinyHunters' compromised database sales. The broader dataset included companies like Teespring (8.2 million records), MyON (13 million), and Netlog (53 million), with pricing ranging from $1,800 to $4,000 for select databases. No specific breach timeline, attack vector, or data exfiltration details were disclosed for Accuradio in the article.

BleepingComputer contacted several newly listed companies for verification. MyON confirmed a July 2020 breach but asserted no student private data was exposed, while Chqbook denied any compromise. Teespring had issued a non-indexed breach notification in June 2020 but avoided further engagement. Accuradio’s response was not mentioned in the article. Historical precedent suggested such broker-advertised breaches were typically legitimate, often prompting eventual disclosures. The article advised users of all affected platforms, including Accuradio, to reset passwords and avoid credential reuse. No follow-up information regarding Accuradio-specific impacts, such as phishing campaigns or forensic findings, was provided in the source material.

Sources

Sources available to members: 1 source.