Whoosh data breach
The Russian scooter-sharing service Whoosh has confirmed a data breach after hackers started to sell a database containing the details of 7.2 million customers on a hacking forum.
Whoosh is Russia’s leading urban mobility service platform, operating in 40 cities with over 75,000 scooters.
On Friday, a threat actor began selling the stolen data on a hacking forum, which allegedly contains promotion codes that can be used to access the service for free, as well as partial user identification and payment card data.
Researchers Identify 3 Hacktivist Groups Supporting Russian Interests
The company confirmed the cyberattack via statements on Russian media earlier this month but claimed that its IT experts had managed to thwart it successfully.
In a new statement shared with RIA Novosti today, Whoosh admits that there is a data leak and informs its user base they are working with law enforcement authorities to take all measures to stop the distribution of the data.
“The leak did not affect sensitive user data, such as account access, transaction information, or travel details,” stated a Whoosh spokesperson.
“Our security procedures also exclude the possibility of third parties gaining access to full payment data of users’ bank cards.”
Russian database leaks
According to an August 2022 report from Roskomnadzor, Russia’s internet watchdog, there were 40 confirmed Russian company data breaches since the beginning of the year.
In September 2022, Group-IB published a report claiming to have observed 140 database sales stolen from Russian companies this summer alone, with the total number of exposed records reaching 304 million.
The most notable leak, in terms of its impact this year, was that of the food delivery app Yandex Food, which led to multiple collateral data exposures.
Whoosh data breach
