300,000 customer data records from Jiurong, a China-based automobile finance platform, have reportedly been compromised – as a bad actor appears to have hacked into the company’s database system.
Crypto news outlet 8BTC, has reported that the malicious hacker is now attempting to sell the leaked data via the dark web. The compromised personal information has revealed the phone numbers and government-issued ID numbers belonging to hundreds of thousands of Jiurong’s customers.
Leaked Records On Sale For 1 Bitcoin
Notably, the bad actor is selling the leaked records for only one bitcoin (BTC), an amount currently valued at about $3,900 – according to CryptoCompare data. The dark web seller has also claimed that he will provide access to the company’s servers, in addition to the compromised customer data.
The bad actor, who has posted the listing on a Chinese underground online forum, goes by the username “Lone Wolf.” His listing message reads in part:
If people are interested to lay hands upon these data [sic], I could provide technical support throughout it.
As mentioned, Jiurong is a (mid-sized) provider of automobile financing services with more than 300,000 registered users. The company reportedly earns about 20 million Chinese yuan (appr. $3 million) in monthly revenue, and has processed 4.4 billion CNY (appr. $634 million) in transactions to date.
Moreover, a number of users who work closely with Jiurong’s platform have confirmed that the leaked customer records actually belong to the company’s clients. At press time, it’s unclear whether the data has already been sold, however, “Lone Wolf” claims he has found a buyer (according to 8btc).
Many More Cases Of Leaked Customer Data
As CryptoGlobe reported in late August, 130 million leaked hotel data records were being sold for 8 bitcoin via China’s dark web by a malicious hacker. The customer data belonging to the Huazhu Hotel Group, one of the largest hotel management firms in China, was been compromised through a large-scale security breach. According to the cybersecurity research firm Threat Hunter, the data breach was the largest in China since the past 5 years.
Also as CryptoGlobe covered, Brazilian cryptocurrency arbitrage platform, Atlas, was hacked in late August and the private account information of over 264,000 users was compromised. Email addresses belonging to Atlas’ users, their crypto account balances, and their phone numbers had all been leaked. At the time, Atlas’ management team confirmed that users’ funds had not been stolen.
