Proexe

We noticed a significant data exposure originating from Proexe, a Polish IT services platform, on November 1st, 2024. The initial discovery pointed to a substantial dataset available on a public Telegram channel, raising immediate concerns about the breadth of compromised user information. What struck us as particularly concerning was the inclusion of bcrypt hashed passwords alongside a rich tapestry of personally identifiable information (PII), suggesting a multi-faceted compromise with clear implications for user account security and potential identity theft. The sheer volume of records, exceeding one million in total across multiple files, underscores the scale of this incident.

The breach breakdown reveals a database compromise impacting Proexe's user base. The leaked data, totaling over 1,000,000 records, prominently features 67,213 unique email addresses. Accompanying these are first and last names, phone numbers, gender, and birthdays. Crucially, the dataset includes bcrypt hashed passwords, indicating that attackers gained access to the underlying database and exfiltrated user credentials. The threat theme here is clearly credential stuffing and targeted phishing campaigns, leveraging the combination of email addresses and other identifying details. The structured nature of the leaked files suggests a direct database dump, likely facilitated through SQL injection or compromised administrative credentials.

While direct mainstream news coverage for this specific Proexe incident appears limited at the time of this analysis, the broader context of data breaches involving IT service platforms is well-documented. Similar incidents often fuel discussions around the security posture of third-party service providers, as they represent a potential pivot point for attackers targeting their clients. Open-source intelligence (OSINT) on Telegram channels frequently reveals such data dumps, underscoring the persistent threat of these platforms as marketplaces for stolen credentials and PII. Research from cybersecurity firms consistently highlights the increasing sophistication of attacks targeting databases and the downstream consequences of exposed hashed passwords, even when using robust algorithms like bcrypt.