Eye4Fraud

We noticed a significant data leak originating from the fraud protection service, Eye4Fraud, surfacing on a prominent hacking forum in early February 2023. What struck us was the sheer volume and granularity of the exposed information, extending beyond direct customers to encompass individuals whose transaction data was processed by the service. The dataset, amounting to a substantial 65GB and comprising 147 distinct tables, suggests a deep compromise of their underlying infrastructure. The presence of bcrypt password hashes alongside personally identifiable information (PII) and even partial payment details presents a multifaceted risk profile.

The breach, discovered on January 25, 2023, was subsequently advertised for sale on a popular clandestine marketplace. The compromised database, attributed to Eye4Fraud, contains approximately 14,693,190 records. The exposed data types include email addresses, first names, last names, and phone numbers. More critically, the leak also includes user credentials in the form of bcrypt password hashes, along with sensitive transaction details such as physical addresses and partial credit card information (card type and last four digits). This suggests a compromise that allowed for the exfiltration of both user account data and transactional records. The structure of the leak, distributed across 147 tables, indicates a potential compromise of multiple interconnected databases or a complex data export process.

While direct news coverage of this specific Eye4Fraud leak appears limited at this time, the nature of the data and the platform of its dissemination align with broader trends observed in recent cybersecurity incidents. The exposure of PII and partial payment data from a fraud protection service is particularly concerning, as it could be leveraged for sophisticated social engineering attacks or to facilitate further fraudulent activities. The fact that Eye4Fraud has remained unresponsive to multiple reporting attempts raises questions about their incident response capabilities and transparency.