BGR India's data hacked, shared on hacking forum: Report


New Delhi, Feb 28 (IANS): Hackers have reportedly compromised tech company BGR's (Boy Genius Report) India website and dumped its data containing emails, hashed passwords and other information on the Dark Web.

According to data breach monitoring service 'Under the Breach', hackers shared SQL databases from unsecured AWS (Amazon Web Services) buckets and one archive belongs to the BGR site in India.

The data leak was first reported by experts from the security firm Under the Breach. The full SQL backup contains emails, hashed passwords and other information, reports BleepingComputer.com.

"Actor dumps the MySQL database of http://bgr.in (@BGRIndia) a huge Indian tech news site! 2,000,000 monthly visitors, @BGR 11,650,000 monthly visitors! Hacked due to exposed s3 AWS bucket. Usernames, emails, passwords and more. Full SQL backup," tweeted Under the Breach.

BGR was yet to issue a statement on the report.

A "full SQL dump" refers to all the posts on the site along with access credentials for authors and administrators.

The experts from Under the Breach said that credentials were stored in hashed form, converted with a function in WordPress.

"In most cases, hackers pay to have the hashes cracked. On some specialised sites, this service is advertised at a reasonable price."

According to the hackers, the overall dump contains at least 36,000 emails and logins for other affected websites like tradinggame.au.com and S3 Production.

Experts from Under the Breach found 16 SQL dumps contained in a seven ZIP archive, said the report.

Launched in October 2006 in the US, Boy Genius Report is a popular destination for breaking consumer electronics news as well as exclusive early looks at unannounced products.

It started off as a column written by Internet personality Jonathan Geller, who later converted it into a website.

  

Top Stories


Leave a Comment

Title: BGR India's data hacked, shared on hacking forum: Report



You have 2000 characters left.

Disclaimer:

Please write your correct name and email address. Kindly do not post any personal, abusive, defamatory, infringing, obscene, indecent, discriminatory or unlawful or similar comments. Daijiworld.com will not be responsible for any defamatory message posted under this article.

Please note that sending false messages to insult, defame, intimidate, mislead or deceive people or to intentionally cause public disorder is punishable under law. It is obligatory on Daijiworld to provide the IP address and other details of senders of such comments, to the authority concerned upon request.

Hence, sending offensive comments using daijiworld will be purely at your own risk, and in no way will Daijiworld.com be held responsible.