Phished Data via CERT Poland data breach: 67K accounts exposed
Severity: high · Patch status: no-fix-needed · Since 2023-08-31
In August 2023, CERT Poland observed a phishing campaign that collected credentials from 68k victims. The campaign collected email addresses and passwords via a phishing email masquerading as a purchase order confirmation. CERT Poland identified a further 202 other phishing campaigns operating on the same C2 server, which has now been dismantled. Exposed data: email addresses, passwords. The breach dates from Feb 25, 2023; Have I Been Pwned loaded it on Aug 31, 2023.
What to do
- If you had a Phished Data via CERT Poland account, change its password and the password of any other account that reused it.
- Turn on multi-factor authentication wherever it is offered.
- Check whether your addresses are in this breach at https://haveibeenpwned.com.
- Expect targeted phishing that quotes the leaked details; verify any unexpected contact out of band.
Sources
All live incidents on Threat Watch
