Drivesure Suffers Drivesure Data Breach

Car dealership supplier drivesure suffered a data infringement last 12 , that triggered 26GB of personal information currently being downloaded and shared upon hacking message boards, according to security vendor Risk Founded Security. The hacked data set http://vpnversed.com/ included titles, addresses and phone numbers of more than 3. two million consumers as well as textual content and electronic mails between traders and their customers. Other information included vehicle VINs, service records and damage promises. Additionally , the hackers introduced more than 93, 000 bcrypt hashed passwords that were uncovered in the breach. While bcrypt is considered stronger than older methods like SHA1 and MD5, the hashes can still end up being brute-forced to get access.

Drivesure is a platform that helps car dealerships build client customer loyalty by leveraging data about their trips and choices, Risk Based Reliability said. Many other things, the company delivers customer-facing services such since roadside assistance programs and training for revenue employees.

The company was strike by a source chain panic in which a product from software program vendor Accellion was destroyed. Accellion told the Seattle Times it absolutely was working to change the old adaptation of the file transfer software using a newer one. Unfortunately, it seems like the auditor for the state of Wa was making use of the older version from the program at the time of the breach.

The company was hacked by the same threat actor or actress that got into SolarWinds as well as the U. Ings. State Office in a the latest spate of goes for. Other companies that promote software or provide expertise to additional businesses are as well getting struck by attackers.