Cyber Risks · Krebs on Security

Even Script Kids Have a Right to Be Forgotten

Summary: A search engine called Indexeus indexed account data from more than 100 recent data breaches, claiming over 200 million searchable entries including records from Adobe and Yahoo, and was marketed to users of the Hackforums site. Its organizer, identified by KrebsOnSecurity as Jason Relinquo, 23, of Lisbon, Portugal, initially charged about $1 per record in Bitcoin to remove or "blacklist" entries, then changed the terms to free removal after citing European "right to be forgotten" and data protection law.

Why it matters: The service was built largely on databases stolen from hacker forums and booter sites, so the people most exposed were the same young users the site was pitched to - and Relinquo said he gave his root password to another user before the site was reportedly compromised. Krebs notes 822 million records were exposed in more than 2,160 breach incidents the prior year, the supply that makes such search services possible.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related