data leak
On August 4, 2023, a significant data breach involving selling personal information on the dark web was discovered. A forum user named "GimmaRink" has posted an advertisement offering a "DI Front Back Selfie SSN Fullinfo US 100.pcs" package, which includes highly sensitive personal data.
Breach Details
Date Discovered: August 4, 2023
Forum Username: GimmaRink
Post Title: DI Front Back Selfie SSN Fullinfo US 100.pcs
Data Offered:
- Front and back images of driver's licenses
- Selfie with the driver's license
- Full Social Security Number (SSN)
- Full personal information including name, address, and financial details
Sample Data Provided:
The forum post includes images showing a woman's face, her driver's license (front and back), and a document listing her personal and financial details. The sample includes:
- Name: Shannon Paige MacCrindle
- Address: [Redacted for privacy]
- SSN: [Redacted for privacy]
Price: $32,000 for the full package of 100 records
Impact Analysis
Potential Risks:
- Identity Theft: The exposed information can be used to impersonate the victims, opening new bank accounts, applying for loans, or making unauthorized purchases.
- Financial Fraud: Detailed financial information can facilitate fraudulent activities, causing significant financial losses.
- Privacy Violations: Personal privacy is severely compromised, potentially leading to further exploitation and emotional distress.
Prevention Tips
- Regular Monitoring: Continuously monitor your credit reports and bank statements for any suspicious activities.
- Identity Theft Protection Services: Consider enrolling in an identity theft protection service to receive alerts and assistance in case of a breach.
- Strong Passwords: Use strong, unique passwords for all accounts and enable two-factor authentication where possible.
- Freeze Credit: If you suspect your information has been compromised, freeze your credit to prevent new accounts from being opened in your name.
- Report Suspicious Activities: Immediately report any suspicious activities to your financial institutions and relevant authorities.
Threat Actor Profile
Username: GimmaRink
Forum Activity:
- Posts: 70
- Threads: 6
- Joined: August 2023
- Reputation: 20
Profile Summary: GimmaRink is an active threat actor on a dark web forum specializing in the sale of personal data. The user's recent activity includes offering a package containing front and back images of driver's licenses, selfies with the IDs, Social Security Numbers (SSNs), and full personal information of 100 individuals. GimmaRink has quickly established a reputation in the forum since joining in August 2023, indicating a high level of engagement and possible expertise in data breaches and identity theft.
Notable Activities:
- Data Sale: Advertising a comprehensive personal information set for 100 individuals, including SSNs and financial details.
- Engagement: With 70 posts and a reputation score of 20, GimmaRink is actively involved in discussions and transactions on the forum.
- Rapid Growth: Despite being a new member, GimmaRink has quickly become prominent, suggesting a potentially well-established background in cybercrime under different aliases or platforms.
Impact: GimmaRink's activities pose significant risks of identity theft, financial fraud, and severe privacy violations for the victims whose data is being sold.