Another Massive Data Dump Appears on the Darknet: 93 Million User Records for Sale

Last week, a hacker (or group) using the alias Gnosticplayers put two major data dumps up for sale on the Dream Market darknet marketplace. The first batch included data from 620 million users across 16 major websites, such as MyHeritage, 500px, and Dubsmash. The hacker was asking for a total of about $20,000 in Bitcoin for this dump.

Shortly after, a second dump appeared for sale, containing 127 million user records from eight more compromised companies, including the file-sharing service Ge.tt and cryptocurrency exchange Coinmama. This batch was priced at $14,500 in cryptocurrency.

The hacker has been openly communicating with the media, stating that he has no intention of stopping. He claims to have around 20 different databases in his possession, some of which he plans to sell, while keeping others for personal use. In total, these collections reportedly contain information on about one billion different accounts, with the oldest leaks dating back to 2012.

It appears Gnosticplayers was telling the truth, as a third collection has now appeared on Dream Market. This new dump contains information on another 92.76 million users and is priced at 2.6249 BTC (about $9,400 USD).

Major Leak: GfyCat User Data

The most notable leak in this dump is data on 8 million users of the popular GIF-hosting service GfyCat. The new dump includes:

• • GfyCat user data (8 million users)

Hacker’s Motives and Media Statements

As previously mentioned, Gnosticplayers is willing to speak with the press. In an interview with ZDNet, he claimed direct responsibility for hacking the listed companies, not just acting as a reseller. He also reiterated his intention to sell information on nearly 1 billion users in total.

When asked about his motives, Gnosticplayers said he is interested in only two things: “money and the downfall of American pigs.”

Each of the hacker’s listings also includes a message criticizing American and British authorities for the arrest of another hacker, George Duke-Cohan, whom Gnosticplayers refers to as a “young and talented guy.” Duke-Cohan was a member of the Apophis Squad group, was arrested last summer, sentenced to three years in prison in the UK, and now faces up to 65 years in prison in the United States.