Breached Data Indexer ‘Data Viper’ Hacked
Summary: Data Viper, a St. Louis-based security startup run by Vinny Troia that indexes roughly 15 billion usernames, passwords and other records from more than 8,000 website breaches, was itself hacked and its user database posted online. The attackers claimed they spent months inside the service and exfiltrated hundreds of gigabytes of breached data, and advertised roughly 2 billion records for sale on the dark web site Empire Market, including data from companies that appear not to have disclosed an intrusion.
Why it matters: Troia said the intruders reached only a development server, and that his developer left credentials exposed in API documentation - the same credential-stuffing pattern he attributes to the Gnostic Players group he planned to name in a Boston keynote. The DOJ's February 2020 guidance warns that exchanging ill-gotten information on crime forums to build trust can itself constitute a federal crime, which is the line any threat intelligence program has to draw.
Read the original at Krebs on Security ↗
- Topics
- Data Breaches
- Related
- TSMC employee data breach linked to cloud provider Cyber Risks · Nov 15, 2026Data Breach at La Poste Subsidiary Maileva Affects 22 Million People in France Cyber Risks · Nov 15, 2026City of Osaka warns of data breach impacting 1 million as Japan reels from dozens of cyber incidents Cyber Risks · Nov 13, 2026