ClickEats

We've seen a concerning uptick in smaller, regional data breaches making their way onto prominent hacking forums, often overlooked in the shadow of larger incidents. Our team flagged this particular breach during routine monitoring of these forums. What set it apart wasn't the size of the victim pool, but the clear, concise format of the data and the potential for it to be used in targeted phishing campaigns against users of the ClickEats platform. The relatively small dataset might be dismissed, but the presence of password hashes alongside email addresses makes it a valuable asset for attackers seeking to reuse credentials across multiple platforms.

ClickEats Breach: 14k User Records Fuel Credential Stuffing

In August 2018, ClickEats, a US-based online food order and delivery platform, suffered a data breach that exposed approximately 14,408 user records. The breach was subsequently disclosed and the data began circulating on a popular hacking forum. This incident highlights the ongoing risk faced by smaller online platforms, which may lack the robust security infrastructure of larger corporations. The breach caught our attention due to its potential for credential stuffing attacks and targeted phishing campaigns, especially given the combination of email addresses and password hashes.

• Total records exposed: 14,408
• Types of data included: Email Addresses, Password Hashes (Base64 encrypted)
• Sensitive content types: User login credentials
• Source structure: Data shared in a format suitable for importing into credential stuffing tools.
• Leak location(s): Popular hacking forum.
• Date of first appearance: August 26, 2018

While the ClickEats breach itself may not be widely covered in mainstream media, similar breaches affecting smaller online platforms are frequently discussed on cybersecurity forums and blogs. These discussions often highlight the vulnerability of smaller businesses and the importance of robust security practices, regardless of size. For example, security researcher Troy Hunt frequently discusses the impact of smaller breaches on his blog and the Have I Been Pwned website, emphasizing the cumulative risk they pose to individual users. The presence of Base64 encoded passwords, while providing a minimal layer of obfuscation, poses a significant risk, as these can be easily cracked using readily available tools.