The Have I Been Pwned (HIBP) project has now added more than two million data records to its database. They disappeared from one of the largest international airport transfer service providers, the Terravision Group.
The London-based group of companies operating across the EU has so far remained silent on the data leak. There is apparently no information on the website and customers have not been notified yet. Like the project on the I-have-been-pwned-Webseite writes, the cyber breach occurred on February 1 of this year. The authors were able to access 2,075,625 data records.
Terravision: sensitive data leaked
The records include names, email addresses, phone numbers, password hashes (salted after all), and in some cases dates of birth and country of origin. According to HIBP, “individuals over a period of months” attempted to get Terravision to report the incident. Unsuccessful.
Anyone who has used airport transfer services in the past should consider at I-got-hit his mailing address check if it has become part of the data leak. Cybercriminals can use the information to optimize phishing attacks and make them more credible. Interested persons should therefore pay extra attention when receiving text messages, messages or emails.
Terravision has not yet responded to an investigation by heise online regarding the cyber theft and its consequences.
Earlier this year, the Have I Been Pwned project added 230 million records to the fund. These came from a service provider of the music streaming service Deezer.
(dmk)
