Berdodee

We noticed a recent data leak impacting Berdodee, a Thai platform catering to auspicious phone numbers and numerology services. The exposure, which surfaced on November 18, 2024, is notable for its relatively contained scope but significant for the sensitive nature of the data involved. What struck us was the platform's niche focus, suggesting a targeted approach or a vulnerability exploited within a specific industry segment. The dataset, shared via a Telegram channel, contained a mix of personally identifiable information and authentication credentials, presenting a clear risk to the affected user base.

The breach of Berdodee, discovered on November 18, 2024, involved a database compromise that exposed approximately 1,500 records. Of these, 786 unique email addresses were identified, alongside associated first and last names, phone numbers, and bcrypt hashed passwords. The source structure of the leak points to a direct database exfiltration, with the compromised data subsequently disseminated on a public Telegram channel. This combination of PII and credential data, even if hashed, presents a substantial risk for credential stuffing attacks and further social engineering attempts against the affected individuals.

While this specific incident involving Berdodee has not garnered widespread mainstream news coverage, the proliferation of data leaks on platforms like Telegram is a persistent and well-documented trend in the cybersecurity landscape. Research from various security firms consistently highlights the growing use of these channels for the distribution of stolen credentials and personal data. The bcrypt hashing, while a stronger algorithm than MD5 or SHA-1, is not impervious to brute-force or dictionary attacks, especially if weak passwords were used by affected users.