History
2024: Data breach of millions of users
On August 22, 2024, it became known that cybercriminals stole information from the database of a Russian Internet pharmacy aptekiplus.ru. The attackers had personal information about millions of customers at their disposal.
According to the Telegram channel "Information Leaks," hackers from the DumpForums group are behind the hack. The stolen files contain buyer names, email addresses (almost 2 million unique e-mails), about 4.5 million unique phone numbers and order dates. The information dates from August 17, 2024.
This information can be used to organize personalized phishing attacks and other fraudulent schemes aimed at stealing money. Using the names of aptekiplus.ru customers, information about their orders and phone numbers, cybercriminals can put victims to sleep. And this significantly increases the chances of success of a fraudulent campaign.
In addition, it is reported that a dump with personal data of buyers of an Internet pharmacy got into free access d-apteka.ru. The set of stolen information includes buyer names, hashed passwords, 51 thousand unique email addresses, 71 thousand unique phone numbers, dates of birth, etc. The information dates from August 19, 2024.[1]