Guntrader.uk hacked

[paulham]

Hi all,
Have you seen that Guntrader.uk was hacked over the last 24 hours. The most worrying thing about it is that user account data was leaked and is now available on the deep web.
The following information has been leaked

• Name

• address

• telephone number

• password hash

• potential gps data

• IP addresses

Looks like the website hasn't announced anything officially yet.

[Disco_GT3]

Where did you get this info from? 'Cause some random was putting it about yesterday or the day before on Bookface, but it seems somewhat unlikely that Guntrader wouldnt have made an announcement to this effect considering FAC license details, GDPR etc???

[phoenix]

It's all over the Stalking Directory and seems genuine
https://www.thestalkingdirectory.co.uk/ ... st-2157337

Cheers

Bruce

[paulham]

Yes it's genuine.
Log into your account and have a look what data if saved for you, if your address and telephone number is there then it's on the list.

Email received from the MD.



Urgent notice to guntrader users

Dear ,

This is to advise you that guntrader is investigating a security breech involving its user database that we became aware of yesterday. This information was stolen from guntrader.uk and has been put on the dark web. At this point we believe that the only data taken was personal contact details. No password, credit cards details or any references you might have to any guns. If we get any further information that needs to be conveyed we will update you further. As the passwords were all encrypted in the database they have not been revealed however you might want to change your password for peace of mind.

We apologise sincerely for this breach.

Alexander Andover
MD guntrader.uk

[Hurricane]

Was just about to post about it.
Fortunately for me, whilst I have used Guntrader to search for stuff, never had to set up a account.

[fizzbangwhallop]

I got the email yesterday and immediately changed my password…. I didn’t go and look to see what personal details I’ve got in there though.

Cheers,

Fizz

[sunndog]

I got the email yesterday and immediately changed my password…. I didn’t go and look to see what personal details I’ve got in there though.

Cheers,

Fizz

Mostly seems to be peoples name, address, and log in details

[fizzbangwhallop]

Got another email this afternoon giving more detail….. includes phone numbers and I’ve had 3 unknown mobile callers this afternoon… ignored them all.

Email …..

As a further update to the majority of questions we have received, please see below.

Password change.
Having discussed with the police peoples propensity to use the same password, they thought it best for us to reset all users passwords to stop any hacks where they have got your password from other sites. Therefore we have done a reset of all passwords so please log off and then back onto the site and follow the steps to update with a new password. In line with general internet security please do NOT use similar passwords to other sites.

Deleting your account.
Once you have changed your password you can continue to use the site. However if you wish to delete the account you can do this by clicking on the “Account” button at the top right of the page, then click on the “account information” tab just below, this will then give you the option to delete your account.

What details have been compromised?
Any details you used to register your account, such as you name, addresses, telephone number, and email addresses. Whilst in the data leak, passwords were encrypted so they were not exposed but since many people use the same passwords for multiple sites, we have reset them following guidance.
There have been no financial details compromised or any links to gun adverts or gun ownership.

ICO?
As several people have questioned, this was reported within 24 hours of the 72 hour timescale allowed. It has also been reported to Action Fraud as required.

Actions taken?
Our specialist team of programmers found the vulnerability and closed it within an hour of being discovered. Various other steps have been taken to prevent further attacks. We are currently working with law enforcement and following their guidelines. All user passwords have been forced to be reset.

If you have any further issues please contact us and we will be happy help.

Again I apologise sincerely for this breach.

Alexander Andover
MD guntrader.uk

[fizzbangwhallop]

It’s even made the ITPro daily email..

https://www.itpro.co.uk/security/data-b ... newsletter

[fizzbangwhallop]

Latest worrying developments on the Guntrader leak….

https://www.thestalkingdirectory.co.uk/ ... ak.220771/

Cheers

Fizz