IntelBroker
In July 2023, the affiliate marketing company AccessTrade suffered a significant data breach that compromised sensitive information from over 44,000 user accounts. The incident was brought to light on July 27, 2023, when a notorious threat actor known as IntelBroker shared details of the breach on a prominent underground forum, BreachForums.
Company Overview: What is AccessTrade?
AccessTrade is one of Southeast Asia's leading affiliate marketing platforms, with a strong presence in countries like Japan, Thailand, Indonesia, and Vietnam. The platform connects advertisers with publishers, enabling businesses to drive traffic and sales through affiliate partnerships. With a large user base that includes marketers, influencers, and various online entities, AccessTrade plays a crucial role in the digital marketing ecosystem across Asia.
Breach Details: What Happened?
The breach reportedly occurred when one of AccessTrade's contractors was hacked, leading to the unauthorized access and subsequent leak of sensitive user data. According to the information released by IntelBroker, the breach affected a total of 44,730 user accounts.
Compromised Data Includes:
- User Information: Time, phone numbers, and CMND (Citizen Identification Numbers)
- Login Credentials: Login names
- Agreements: User agreements
- Referral Data: Links and UTM sources
The leaked data, now available on the dark web, poses significant risks for identity theft, phishing attacks, and other cybercrimes.
Threat Actor Profile: Who is IntelBroker?
IntelBroker is a well-known figure in the cybercrime community, notorious for leaking large databases and selling sensitive information on underground forums. While the true identity of IntelBroker remains unknown, their activities have been linked to several high-profile data breaches over the years. This individual or group is known for their methodical approach to breaching databases and exploiting vulnerabilities in organizations with lax security measures.
Impact Analysis: What Does This Mean for AccessTrade Users?
The AccessTrade breach is particularly concerning given the nature of the compromised data. Users affected by this breach may face the following risks:
- Identity Theft: With personal information such as phone numbers and Citizen Identification Numbers exposed, users are at high risk of identity theft.
- Phishing Scams: Cybercriminals may use the leaked data to craft convincing phishing emails, luring users into divulging even more sensitive information.
- Unauthorized Access: With login credentials compromised, affected users may find their accounts accessed without permission, leading to potential financial loss and reputational damage.