Threat Actor Claims Myconnect Data Theft, Offers Records for Sale
Summary
A threat actor claims to have stolen 18GB of Myconnect data and is offering it to a single buyer. The reportedly affected files include identity, bank, health-insurance and employment documents; the claim is not independently confirmed.
Key points
- A threat actor claims to have exfiltrated 18GB from Myconnect, comprising 21,106 files and 15,978 folders.
- The seller reportedly posted screenshots of Myconnect’s internal portal and directories as evidence; the article does not independently verify the claim.
- The full database is reportedly being offered to a single buyer on a hacking forum.
- The claimed records include names, contact and birth details, Social Security numbers, and scanned identity documents.
- Other reportedly exposed materials include bank details, Carte Vitale scans, resident cards, birth certificates, proof of address and signed employment documents.
Article Details
- Victim Organization
- Myconnect
- Incident Type
- Alleged data breach and data exfiltration
- Data Types Exposed
- Full names and maiden names
- Email addresses and phone numbers
- Physical addresses
- Birth details
- Social Security numbers
- National identity card details and scans
- Bank account details
- Carte Vitale scans
- Resident card scans
- Proof of address documents
- Birth certificates
- Signed employment documents
- User portal photos
- Affected Records
- The article title reports 125,000 user records; the article also reports that the seller claims the dataset contains 21,106 files and 15,978 folders.
- Affected Data Size
- 18GB, according to the threat actor's claim.
- Operational Impact
- No operational disruption is reported. Screenshots of the internal portal and directories were presented by the seller as proof of the alleged breach.
- Ransom Or Extortion
- The seller is reportedly offering the full database for sale to a single buyer on a hacking forum; no ransom demand is reported.
- Claim Status
- claimed