Drivesure Car Dealership Info Breach

Companies offering software or perhaps products to other web based often prone to data removes. This is true of even the largest businesses. However , more compact companies just like car dealerships that count on specialized offerings to run all their business could find themselves at a greater exposure to possible hacking attacks.

One company, drivesure, which provides program for car dealerships to help these groups build customer loyalty, experienced a infringement that kept the information of approximately 3. two million persons available online. The attack occurred last December, and the stolen info set included names, house addresses, cell phone numbers, text messages and emails between dealers and the customers, VINs of automobiles and documents as well as over 93, 1000 Bcrypt hashed passwords. Though bcrypt is known as safer than more aged methods just like MD5 and SHA1, it could still be brute forced with respect to an extended period of time when you will discover no safe guards in place, in accordance to reliability vendor Risk Based Secureness.

Hackers placed the database on Raidforums hacking discussion boards late last month, according to Bleeping Pc. The content reportedly included multiple drivesure data breach directories of data files, including those in the backend on the company’s MySQL databases that exposed 91 sensitive databases ranging from specific car dealership and inventory information to revenue info, reports, demands and client data.