DriveSure Data Infringement

08/03/2023

DriveSure is mostly a training system https://vpnversed.com that helps car dealers to build client loyalty. It has millions of customers that subscribe to their training and course material. They give their brands, addresses, phone numbers and emails to the site.

In 12 2020, DriveSure suffered a data breach which resulted in 26GB of private information becoming downloaded and shared on a cracking forum. This included four. 6 , 000, 000 unique email addresses, names, phone numbers and physical addresses. Car information was also uncovered including makes, models, VIN numbers and odometer readings.

The cyber criminals made the DriveSure info available for free on multiple hacking message boards, so it was freely available to any individual. The attackers left a 22GB folder which usually contained DriveSure’s MySQL databases, subjecting 91 hypersensitive databases.

PII was contained in the dump, along with damage cases, extended car details and dealer and warranty information. These were all of the prime with respect to exploitation by simply other threat actors.

More than 93, 500 bcrypt hashed passwords were also made public. Though stronger than SHA1 and MD5, bcrypt passwords can still be brute-forced when downloaded from a server, Risk Based Protection explained.

Having a poor pass word can allow a great attacker of stealing your computer data from the storage space, so it is very important to switch them immediately. In addition , a fresh good idea to wipe the hard drive on your desktop before disposing of it to stop any data from being accidentally or perhaps maliciously uncovered. You can do this simply using a data destruction program or building a fresh installing of the operating-system.