[BreachExchange] ShinyHunters leak database of Indian wedding portal WedMeGood

Destry Winant destry at riskbasedsecurity.com
Fri May 7 10:41:19 EDT 2021


https://www.hackread.com/shinyhunters-leak-india-wedmegood-database/

The leaked WedMeGood database contains 41.5 GB worth of data which is
another massive data leak from ShinyHunters.
ShinyHunters, the notorious hacker known for leaking databases of firms
like Animal Jam, Mashable, Upstox, and 123RF, etc., is back with yet
another high-profile data breach.

Lately, the hacker has been focusing on leaking databases of Indian
entities. Although unconfirmed; it is believed that the hacker’s extortion
attempts didn’t yield desirable results, which is why the hacker leaks the
stolen data.

This time around, ShinyHunters has dumped a database belonging to
WedMeGood, a popular Indian wedding planning platform that looks after
every aspect of the wedding, from finding venues to photographers and
arranging for wedding outfits.

Leaked data

WedMeGood is yet to verify the data breach however, according to
Hackread.com’s analysis, the database contains 41.5 GB worth of data
including the following:

- City
- Gender
- Full names
- Phone numbers
- Email addresses
- Password hashes
- Booking leads
- Last login date
- Account creation date
- Facebook unique ID numbers
- Vacation description for Airbnb

It is worth noting that apparently, WedMeGood suffered a data breach back
in October 2020 when a threat actor published a list of several compromised
sites and offered their database for price.


If you have used this platform, it is high time you reset your password and
if using the same credentials to access other accounts, change their
passwords as well.

ShinyHunters on a Data Leaking Spree

Just ten days back, ShinyHunters leaked Big Basket data while previous data
leaks from ShinyHunters include the following:

WattPad – 271 million accounts leaked

Dunzo – 11GB worth of data leaked

Dave.com – 7 million accounts leaked

Bhinneka – 1 million+ accounts leaked

Minted – 5 million accounts leaked

ProctorU – 444,267 accounts leaked

Tokopedia – 91 million accounts leaked

Couchsurfing – 17 million accounts leaked
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.riskbasedsecurity.com/pipermail/breachexchange/attachments/20210507/1c9d8937/attachment.html>


More information about the BreachExchange mailing list