{"id":15238,"date":"2024-01-10T00:00:00","date_gmt":"2024-01-10T00:00:00","guid":{"rendered":"https:\/\/arrendamientoprotegido.com\/?p=15238"},"modified":"2025-06-27T02:10:31","modified_gmt":"2025-06-27T02:10:31","slug":"drivesure-data-breach","status":"publish","type":"post","link":"https:\/\/arrendamientoprotegido.com\/?p=15238","title":{"rendered":"Drivesure Data Breach"},"content":{"rendered":"

The Illinois-based organization drivesure, which helps car dealerships build customer dedication and offers area belonging to the road assist with customers, suffered a data breach that remaining millions of people\u2019s personal facts available online. The breach happened last Dec and online hackers published the information on a hacking forum previous this month within the handle \u201cpompompurin. \u201d <\/p>\n

Altogether, 22GB of information was published on Raidforums. The eliminate included multiple directories from drivesure\u2019s MySQL directories, exposing 91 sensitive directories that contained PII, damage says, extended car details and dealer and warranty info. <\/p>\n

Besides brands, dwelling addresses and phone numbers, the dump included text messages and emails between drivesure and vpnversed.com\/board-portal-increases-performance\/<\/a> its clients, VINs of vehicles and documents. More than 93, 000 bcrypt hashed passwords were also explained. While bcrypt is considered better than more mature strategies like SHA1 or MD5, the hashed ideals can still end up being brute compelled for extended amounts of time when they\u2019re downloaded by a web server, security supplier Risk Based Security says. <\/p>\n

The released information can be prime with respect to exploitation simply by threat actors, especially for insurance scams. Cybercriminals could use PII, damage comments, extended car information and dealer and warranty information to target insurance companies and policyholders, the security seller notes. The attack is believed to have utilized a drawback in the record transfer app from course provider Accellion, which has stated it\u2019s modernizing it. Individuals who have an account in drivesure should think about changing all their passwords, the seller advises. It may be also advising anyone who has been effective for a dealership or business that used the company\u2019s products to take extra precautions to prevent any long term future attacks. <\/p>\n