A new dark web post has surfaced on the internet, alleging an Investor’s Business Daily data breach. The threat actor has claimed to have 35,000 email records available for sale on the dark web. The incident, publicized on a dark web forum, was added on January 28, 2024.
The announcement, posted by a user named ThirstyDB, declares the availability of a list comprising 35,000 email addresses belonging to users of investors.com. ThirstyDB claims the data is fresh, gathered within the last two days, and obtained through a virtual machine (VM) involving private sources and crypto leaks.
Investor’s Business Daily, a prominent American newspaper and website specializing in stock market coverage, international business, finance, and economics, was founded in 1984 by William O’Neil. As part of News Corp, the organization’s headquarters is situated in Los Angeles, California.
Investor’s Business Daily Data Breach and Sale
The seller assures that the data is legitimate, with the option for forum administrators to verify its authenticity. ThirstyDB emphasizes the necessity of a middleman for transactions and provides contact details for potential buyers.
The Cyber Express, in an attempt to learn more about this Investor’s Business Daily data breach, reached out to the organization.
However, at the time of writing this, no official statement or response has been recorded, leaving the claims for the Investor’s Business Daily data breach stand unverified.
Dark Web’s Illicit Markets
The dark web, notorious for criminal activities, serves as a marketplace for cybercriminals to sell data obtained through various means, including credential stuffing attacks, phishing, hacking, and insider leaks.
Companies facing such breaches not only encounter the risk of their data becoming more expensive but also run the danger of developing a reputation as a lucrative target for future cyber extortion and ransom attacks.
Purchasing data from the dark web presents inherent risks. The source of the data is often untrustworthy, either originating directly from threat actors or individuals who have acquired it illicitly. The data may contain malicious code or even a Trojan horse, providing cybercriminals with unauthorized access to company systems.
Companies involved in such transactions also face reputational risks, even if their identity as the buyer remains unknown. Cybercriminals may still publicize the sale within their circles, exposing the company to potential damage to its image.
Media Disclaimer: This report is based on internal and external research obtained through various means. The information provided is for reference purposes only, and users bear full responsibility for their reliance on it. The Cyber Express assumes no liability for the accuracy or consequences of using this information.