DriveSure Data Break

DriveSure may be a training system in order to car stores to build client loyalty. It has millions of customers that subscribe to the training and course material. They give their brands, addresses, phone numbers and email messages to the internet site.

In Dec 2020, DriveSure suffered a data breach which ended in 26GB of private information staying downloaded and shared on a hacking forum. This kind of included 5. 6 , 000, 000 unique emails, names, cell phone numbers and physical addresses. Vehicle information was also exposed including makes, models, VIN numbers and odometer psychic readings.

The cyber-terrorist made the DriveSure data available for free of charge on multiple hacking discussion boards, so it was freely accessible to any person. The attackers broke up with a 22GB folder which contained DriveSure’s MySQL databases, subjecting 91 delicate databases.

PII was contained in the dump, and damage boasts, extended car details and dealer and warranty information. These were pretty much all prime with respect to exploitation simply by other threat actors.

Above 93, 1000 bcrypt hashed passwords were made public. Though stronger than SHA1 and MD5, bcrypt passwords can still be brute-forced when downloaded from a server, Risk Based Security explained.

Creating a poor security password can allow a great attacker of stealing drivesure data breach your computer data from the server, so it’s important to switch them as soon as possible. In addition , a fresh good idea to wipe the hard drive on your desktop before getting rid of it to avoid any data from becoming accidentally or maliciously revealed. You can do this with a data destruction program or creating a fresh installing of the operating-system.