DriveSure data breach: 3.7M accounts exposed
Severity: high · Patch status: no-fix-needed · Since 2021-05-10
In December 2020, the car dealership service provider DriveSure suffered a data breach. The incident resulted in 26GB of data being downloaded and later shared on a hacking forum. Impacted personal information included 3.6 million unique email addresses, names, phone numbers and physical addresses. Vehicle data was also exposed and included makes, models, VIN numbers and odometer readings. A small number of passwords stored as bcrypt hashes were also included in the data set. Exposed data: email addresses, names, passwords, phone numbers, physical addresses, vehicle details. The breach dates from Dec 19, 2020; Have I Been Pwned loaded it on May 10, 2021.
What to do
- If you had a DriveSure account, change its password and the password of any other account that reused it.
- Turn on multi-factor authentication wherever it is offered.
- Check whether your addresses are in this breach at https://haveibeenpwned.com.
- Expect targeted phishing that quotes the leaked details; verify any unexpected contact out of band.
Sources
All live incidents on Threat Watch
