Sorb Claims Sale of 18,000-Record Alyna User Database
Summary
Sorb claims to be selling an 18,000-record Alyna database for $300. The listing reportedly includes MD5-hashed passwords, personal and location data, booking details, and Kfast tokens; the claim is unverified.
Key points
- A threat actor identified as Sorb claims to be selling Alyna’s user database, reportedly containing 18,000 records.
- The listing reportedly includes 13,500 unique email hashes, 16,000 unique phone numbers, full names, and dates of birth.
- Reported data includes MD5-hashed passwords, GPS coordinates, booking and street addresses, and Kfast tokens.
- The seller reportedly offers the dataset for $300 as a single-buyer exclusive.
- The article reports a sale claim; it does not independently verify the data’s authenticity or that Alyna was breached.
Article Details
- Victim Organization
- Alyna
- Incident Type
- Alleged database breach and sale of user data
- Data Types Exposed
- MD5-hashed passwords
- Email hashes
- Phone numbers
- Full names
- Dates of birth
- GPS coordinates
- Booking and street addresses
- Kfast tokens
- Device and session metadata
- Other personally identifiable information
- Affected Records
- 18,000 records claimed
- Operational Impact
- No operational disruption is reported. The article says exposed GPS coordinates and addresses create a safety risk.
- Ransom Or Extortion
- Sorb claims to offer the dataset for $300 as a single-buyer exclusive sale.
- Claim Status
- claimed