MatrixChart Systems

We noticed a significant data leak surfacing on a well-known underground forum on August 26, 2018. This particular incident involved MatrixChart Systems, a provider of financial charting and technical analysis software. What struck us was the relatively straightforward nature of the compromise, yielding a common but still potent combination of user credentials. The dataset, comprising over 10,000 records, presents a clear risk of credential stuffing attacks against the affected user base and potentially other services where these credentials might be reused.

The breach originated from a database compromise, resulting in the exposure of 10,237 records. The leaked data primarily consists of email addresses and their corresponding phpass password hashes. This type of hash, while not plaintext, is susceptible to offline cracking attempts, especially if weak passwords were used by the affected users. The presence of this data on a public hacking forum signifies a high likelihood of it being incorporated into credential stuffing lists, targeting both MatrixChart Systems and other online platforms. The source structure points to a direct database exfiltration, suggesting a potential vulnerability in the system's database security or access controls.

While this specific leak did not garner widespread mainstream media attention at the time, it aligns with a broader trend of financial and trading platforms becoming targets for credential harvesting. Research into similar breaches from that period often highlights the persistent threat of attackers exploiting weak password security and database vulnerabilities to amass user data for subsequent malicious activities. The use of phpass hashes, while a step up from plaintext, is a common target for attackers who can leverage readily available cracking tools and pre-computed rainbow tables.