Digital Point

NJCCIC Data Breach Notification

Original Release Date: 9/10/2020

Summary

Digital Point, one of the largest webmaster marketplaces, exposed over 62 million records of roughly 850,000 users due to an unsecure ElasticSearch database. Revealed data includes usernames, internal user identification numbers, internal records, and user posts. The exposure of this data may allow threat actors to conduct future attacks such as domain hijacking, ransomware, and phishing. Additionally, Meow Bot , a large-scale ElasticSearch bot that searches for unprotected databases and deletes all data leaving the word “meow” followed by random numbers in place of its contents, was discovered just prior to disclosure. Access to the database was restricted within hours of notification on July 1, 2020. Website administrators are urged to enable multi-factor authentication and use strong, unique passwords to avoid victimization.

New Jersey Cybersecurity & Communications Integration Cell

2 Schwarzkopf Dr, Ewing Township, NJ 08628

njccic@cyber.nj.gov

OUR COMMITMENT

The NJCCIC is a component organization within the New Jersey Office of Homeland Security and Preparedness. We are the State's one-stop-shop for cyber threat analysis, incident reporting, and information sharing and are committed to making New Jersey more resilient to cyber threats by spreading awareness and promoting the adoption of best practices.

Agency Seals of State of NJ, NJOHSP and NJCCIC

STAY CONNECTED:

View our Privacy Policy here.

View our Site Index here.