After Facebook and LinkedIn leaked a combined 1 billion pieces of personal information for sale on the Internet, it appears that it is now the turn of Clubhouse, a social networking platform with 1.3 million users’ personal information that has recently become a hit, in the form of a SQL database that has been placed on a popular hacking forum for free viewing.
Cyber News, a cybersecurity news and research site, reported that the leaked user-related data included user IDs, names, posts, nicknames, tweets and Instagram accounts tied to them, the number of people tracked, the number of trackers, account creation dates, and invitees.
Although this database does not contain sensitive data such as credit card data and legal documents. That said, for a serious cybercriminal, even if a user’s name is all that is available, it may have enough in common with other social media accounts set up by the same person to cause substantial harm to that user.
A person with an axe to grind can combine Clubhouse data with data exfiltrated elsewhere to complete the profile of their potential target. With such data, they could launch more credible phishing, social engineering attacks, or even steal the accounts of those people.
According to the report, if Clubhouse users suspect that their personal information has been leaked, first, they can use the site’s personal information leak checker (https://cybernews.com/personal-data-leak-check/) to check. Second, be sure to watch out for suspicious Clubhouse messages and links from strangers asking to be clicked. Third, consider using a password manager to create strong passwords. Finally, activate the two-step verification mechanism on all your online accounts.
Recent Comments