Guntrader Information Leak

[ShaneS]

It has been brought to my attention that there has been a leak of information from GunTrader.

Account details including Names and Addresses have been published on the internet. With the obvious link to firearms.

I know someone that has access to the data and has confirmed that my name and address have been leaked.

If you have a GunTrader account then its likely that your data may have been comprised as well.

 

[Woodsmoke]

I'm not surprised, frankly. The website is absolutely terrible. Don't get me wrong, I'm a huge fan of the service, but the website looks as though it's been done seriously on the cheap so I don't imagine the security will be up to much . . . .

 

[NullMac]

1. CHANGE YOUR PASSWORD.

2. What did Guntrader say when you asked them if there has been a data breach ?

3. NCSC

 

[Pete1774]

I got the same warning today from my VPN service.

 

[deerstalker.308]

I just got an alert so have changed my password. Ffs.

 

[ShaneS]

1. CHANGE YOUR PASSWORD.

2. What did Guntrader say when you asked them if there has been a data breach ?

3. NCSC

I haven't contacted them personally but i know of a few people that have. i'm sure i was made aware of the breach before even they did.

 

[Lloyd90]

How did it happen?
What are they doing about it?
Where has the info gone?
How do I find out if my info has been breached?

 

[ShaneS]

I just got an alert so have changed my password. Ffs.

They have data on the password hash so its doubtful they have your actually password. good practice to change it though.

they worrying one is they have address data but it also looks like they have data on invoices and advert listings

 

[ShaneS]

How did it happen?
What are they doing about it?
Where has the info gone?
How do I find out if my info has been breached?

They where targeted by a group who got past there security (if there was any).

Its unknown what is being done about it currently, a few licensing teams have been made aware as well as the police.

i know someone who has access to the leaked data, i could ask him to check but i doubt he wants to be the point of call for it.

 

[NullMac]

They have data on the password hash so its doubtful they have your actually password. good practice to change it though.

they worrying one is they have address data but it also looks like they have data on invoices and advert listings

So they got access to unencrypted personal data ?

 

[ShaneS]

So they got access to unencrypted personal data ?

Yes.. very big cock up from the GunTrader Team.

 

[Slaughtermanste]

I've called guntrader and all they kept saying is that it's under investigation but there is no need for the police..... **** that I've called the feo straight away! This is an absolute shambles

 

[Kalahari]

Might be worth call the Data Control people. They take this sort of stuff more seriously.

David.

 

[ShaneS]

Might be worth call the Data Control people. They take this sort of stuff more seriously.

David.

I think this is a very good call, heard a few licensing teams say we can't really do anything contact the police on 101. The help from 101 seemed about as useful, didn't know what to do so have forwarded it to a supervisor.

 

[ShaneS]

I've called guntrader and all they kept saying is that it's under investigation but there is no need for the police..... **** that I've called the feo straight away! This is an absolute shambles

What did he say? was he already aware?

 

[Slaughtermanste]

He didn't know but said that he would look in to it, I have to be honest guntrader sounded like they couldn't care less!!!

 

[User00026]

Wonder what data was stolen

a proper breach involving personal and financial data is BIG fine territory. End of Guntrader if so

 

[ShaneS]

Wonder what data was stolen

a proper breach involving personal and financial data is BIG fine territory. End of Guntrader if so

Looks like almost all data has been leaked, think the only one that's "safe" is password which are hashed. If the hash is decrypted they'll have access to passwords too.

i assume some financial data hasn't been taken but they have info on dealers billing information etc.

This kind of breach should never of happened and i assume there are in for some big fines.

 

[deerstalker.308]

I’ve emailed them and closed my account, for all the good it will do.
I asked whether my data was compromised but they dodged answering that question. Shambles.

 

[Andyquadra]

They where targeted by a group who got past there security (if there was any).

Its unknown what is being done about it currently, a few licensing teams have been made aware as well as the police.

i know someone who has access to the leaked data, i could ask him to check but i doubt he wants to be the point of call for it.

Just how has you friend got access to the stolen file? Shouldn't this be handed over to the police as evidence of what's been hacked?