ChimeraZ claims leak of Ma Deco de Fête customer and payment data covering about 13,000 people
A threat actor using the handle ChimeraZ claims to have leaked a dataset from Ma Deco de Fête, an online shop selling party decorations and personalized invitations. The listing advertises 45,156 lines covering roughly 13,000 people in a 6 MB CSV, with multiple download mirrors. The dataset's authenticity, source, counts and current availability have not been independently verified, and how the data was obtained is not disclosed.
Detalhes técnicos
- Claimed counts: 12,548 unique addresses, 11,137 unique email addresses, 10,793 unique MD5 password hashes, 10,704 unique phone numbers, 8,144 unique card numbers and 4,012 unique messages.
- A Colissimo / shipping CSV is referenced.
- Visible samples contain names, postal addresses, phone numbers, email addresses, password hashes, payment-related values and customer-service messages.
- No malware hash, Tox ID, Session ID or attacker-controlled IP is visible.
- The article maps the activity to T1213.006 (Data from Information Repositories: Databases) as an inference only. Unauthorized access to Ma Deco de Fête systems is not established.
Remediação
The article gives no remediation guidance. If the data is authentic, it could support credential attacks, targeted phishing, identity fraud and payment fraud against affected customers. Defenders should watch for these and consider forced password resets and card monitoring for the affected population.
Linha do tempo
-
ChimeraZ claims leak of Ma Deco de Fête customer and payment data covering about 13,000 people
ler a análise desta fonte ocultar
A threat actor using the handle ChimeraZ claims to have leaked a dataset from Ma Deco de Fête, an online shop selling party decorations and personalized invitations. The listing advertises 45,156 lines covering roughly 13,000 people in a 6 MB CSV, with multiple download mirrors. The dataset's authenticity, source, counts and current availability have not been independently verified, and how the data was obtained is not disclosed.
Technical Details
- Claimed counts: 12,548 unique addresses, 11,137 unique email addresses, 10,793 unique MD5 password hashes, 10,704 unique phone numbers, 8,144 unique card numbers and 4,012 unique messages.
- A Colissimo / shipping CSV is referenced.
- Visible samples contain names, postal addresses, phone numbers, email addresses, password hashes, payment-related values and customer-service messages.
- No malware hash, Tox ID, Session ID or attacker-controlled IP is visible.
- The article maps the activity to T1213.006 (Data from Information Repositories: Databases) as an inference only. Unauthorized access to Ma Deco de Fête systems is not established.
Remediation
The article gives no remediation guidance. If the data is authentic, it could support credential attacks, targeted phishing, identity fraud and payment fraud against affected customers. Defenders should watch for these and consider forced password resets and card monitoring for the affected population.