Category Archives: Have I been pwned?

Breach at food delivery service Chowbus reportedly affects hundreds of thousands of customers

Posted on by

Two months after securing a $33 million funding round from investors, food delivery startup Chowbus is grappling with a breach that observers say exposed personal data on hundreds of thousands of customers. Customers reported receiving an email on Monday from Chowbus containing reams of customer data, including names, phone numbers and mailing and email addresses. The file is said to contain more than 800,000 rows. Got an email from @ChowbusOfficial support with a link to their full user data dump. Columns include email, full name, and full address. File has ~800000 rows. — Johnny Wang (@Johnny___Wang) October 5, 2020 The incident is a blow for a budding company that had recently attracted funding from Silicon Valley and New York venture firms alike. Founded four years ago in Chicago, Chowbus touts its app’s ability to connect diners with authentic and undiscovered Asian restaurants. In an email to customers, Chowbus CEO Linxin […]

The post Breach at food delivery service Chowbus reportedly affects hundreds of thousands of customers appeared first on CyberScoop.

Continue reading Breach at food delivery service Chowbus reportedly affects hundreds of thousands of customers→

How to explain "the k-anonymity model used by HaveIBeenPwned for pwned passwords doesn’t expose your passwords" to a layman?

Posted on by

People are naturally skeptical when they hear about the HaveIBeenPwned pwned passwords search, because who would in their right mind enter their password into a random website? And sure, HIBP uses k-anonymity to make sure they don’t know y… Continue reading How to explain "the k-anonymity model used by HaveIBeenPwned for pwned passwords doesn’t expose your passwords" to a layman?→

I’m Open Sourcing the Have I Been Pwned Code Base

Posted on by

Presently sponsored by: Tines: Breaches are inevitable and early detection is crucial. Assure yourself what’s next with security automation part 1.

Let me just cut straight to it: I’m going to open source the Have I Been Pwned code base. The decision has been a while coming and it took a failed M&A process to get here, but the code will be turned over to the public for the

Continue reading I’m Open Sourcing the Have I Been Pwned Code Base→

How BeerAdvocate Learned They’d Been Pwned

Posted on by

Presently sponsored by: SecurityFWD. A brand new YouTube show from Varonis. Watch Episode 1: How Far can Wi-Fi Travel?

I love beer. This comes as no surprise to regular followers, nor should it come as a surprise that I maintain an Untappd account, logging my beer experiences as I (used to 😢) travel around the world partaking in local beverages. When I received an email from someone over that way

Continue reading How BeerAdvocate Learned They’d Been Pwned→

Pwned Passwords, Version 6

Posted on by

Presently sponsored by: Credential stuffing is currently the biggest threat to organisations, find out how you can protect your network right now with safepass.me

Today, almost one year after the release of version 5, I’m happy to release the 6th version of Pwned Passwords. The data set has increased from 555,278,657 known compromised passwords to a grand total of 572,611,621, up 17,332,964‬ (just over 3%). As with previous

Continue reading Pwned Passwords, Version 6→

The Unattributable “Lead Hunter” Data Breach

Posted on by

Presently sponsored by: NordVPN, the leading VPN provider. 5000+ servers in 59 countries. Use on 6 devices at the same time, on every major platform.

Pwned again. Damn. That’s me who’s pwned again because my personal data has just turned up in yet another incident from a source I can’t attribute. Less than 3 weeks ago I wrote about The Unattributable “db8151dd” Data Breach which, after posting that blog post and a sample of my

Continue reading The Unattributable “Lead Hunter” Data Breach→

Analysing the (Alleged) Minneapolis Police Department “Hack”

Posted on by

Presently sponsored by: NordVPN, the leading VPN provider. 5000+ servers in 59 countries. Use on 6 devices at the same time, on every major platform.

The situation in Minneapolis at the moment (and many other places in the US) following George Floyd’s death is, I think it’s fair to say, extremely volatile. I wouldn’t even know where to begin commentary on that, but what I do have a voice on is data breaches which prompted

Continue reading Analysing the (Alleged) Minneapolis Police Department “Hack”→