This top torrent service suffered a major data breach

Date:
Sat, 04 Nov 2023 05:27:45 +0000

Description:
Huge database of WiHD information was left unprotected online for anyone who knew where to look.

FULL STORY ======================================================================

A French private torrent community called World in HD (WiHD) inadvertently exposed sensitive user data to the wider internet.

Research from Cybernews discovered an unprotected database using Elasticsearch. The database, the researchers said, contained user emails, IP addresses, service information, usernames, and hashed passwords, for both forum users and administrators.

Almost 100,000 people have had their data exposed this way. Torrents are a
way to share big files over the internet, and while theyre not illegal by design, a lot of people use them to share pirated content, such as movies and series, music, games, cracked software, and more. Therefore, having
personally identifiable information exposed this way also potentially exposes these people to criminal charges. Blackmailing the users

Most torrent sites, such as the famed Pirate Bay, advocate the use of VPN
when downloading things via torrents, so its safe to assume that most users created fake email addresses and used IP spoofing software to remain hidden.

WiHD is a popular video torrent community that specializes in content in French and English languages and tries to maintain high standards. The
members have access to high-definition TV series, animations, and other content. Allegedly, becoming a member is relatively hard, as some people were observed selling their invites for more than $100.

Threat actors could engage in various illicit activities, such as tracking
and identifying users for legal repercussions, launching targeted phishing attacks, or potentially exposing users downloading habits, raising privacy
and legal concerns for affected individuals, researchers said.

It is unknown if any threat actors (or law enforcement, for that matter) discovered this database before Cybernews did. It is also unknown if WiHD was notified of the discovery beforehand, or if they managed to lock the database down in the meantime. More from TechRadar Pro Tackling malicious domains and typosquatting Here's a list of the best firewalls today These are the best endpoint protection tools at the moment



======================================================================
Link to news story: https://www.techradar.com/pro/security/this-top-torrent-service-suffered-a-maj or-data-breach


--- Mystic BBS v1.12 A47 (Linux/64)
* Origin: tqwNet Technology News (1337:1/100)