Cloud USA / zacks.com / Investment Research Company / Customers / 15 Million / 2024

[auden_greyfall]

Zacks Investment Research has suffered a data breach exposing nearly 12 million user accounts, according to reports on a hacking forum.

The breach, which allegedly occurred in June 2024, includes sensitive user information such as names, email addresses, physical addresses, phone numbers, usernames, IP addresses, and unsalted SHA-256 password hashes. This marks the second major cybersecurity incident for Zacks in recent years, following a confirmed breach in 2023.

The breach has just been added to Have I Been Pwned (HIBP) after the compromised data surfaced on a hacking forum last month. A user operating under the alias Jurak posted about the incident on BreachForums on January 24, claiming to have accessed Zacks' source code and databases containing 15 million lines of customer records. The leaked data reportedly includes a superset of records from the 2023 breach, meaning that it contains both previously stolen information and additional newly exposed user details.



Headers :
​

customer.id, email, date.registered, partner.code, username, password, clue, hint, first.name, last.name, display.name, firm.name, address.line.1, address.line.2, city, state.province, post.code, country, day.phone, day.phone.ext, evening.phone, fax, sms.nbr, address.type.id, address.id, sms.opt.in.date, sms.opt.out.date
Sample :

To view the content, you need to Sign In or Register.

Session:
053125aa3d162c3e5abdb14e97b2ed1d52568e0d75ce2b2a56fb412608f328aa5a

 

[datadog]

link please?