Quantum Booter data breach: 48K accounts exposed
Severity: high · Patch status: no-fix-needed · Since 2015-04-04
In March 2014, the booter service Quantum Booter (also referred to as Quantum Stresser) suffered a breach which lead to the disclosure of their internal database. The leaked data included private discussions relating to malicious activity Quantum Booter users were performing against online adversaries, including the IP addresses of those using the service to mount DDoS attacks. Exposed data: email addresses, ip addresses, passwords, private messages, usernames, website activity. The breach dates from Mar 18, 2014; Have I Been Pwned loaded it on Apr 4, 2015.
What to do
- If you had a Quantum Booter account, change its password and the password of any other account that reused it.
- Turn on multi-factor authentication wherever it is offered.
- Check whether your addresses are in this breach at https://haveibeenpwned.com.
- Expect targeted phishing that quotes the leaked details; verify any unexpected contact out of band.
Sources
All live incidents on Threat Watch
