Drivesure Car Dealership Data Breach

Companies that offer software or products to other companies are often at risk of data removes. This is true of however, largest organizations. However , smaller companies like car dealerships that count on specialized services to run their particular business could find themselves at a greater risk for hacking attacks.

The kind of company, drivesure, which provides provider for car dealerships to help them build consumer loyalty, skilled a infringement that still left the information of approximately 3. a couple of million persons available online. The attack happened last December, and the stolen data set included names, home addresses, telephone numbers, text messages and emails between dealers and the customers, VINs of cars and service records as well as over 93, 000 Bcrypt hashed passwords. Even though bcrypt is viewed more secure than elderly methods like MD5 and SHA1, it may still be incredible forced meant for an extended period of time when there are no shields in place, in respect to protection vendor Risk Based Reliability.

Hackers published the data source on Raidforums hacking discussion boards late last month, according to Bleeping Computer system. The content reportedly included multiple vpnversed.com/ directories of data files, which include those from backend of your company’s MySQL databases that exposed 91 sensitive databases ranging from in depth car dealership and products on hand information to revenue data, reports, statements and consumer data.