3.8 billion phone numbers of Clubhouse data breach is available on Dark Web
William Marshal
Posted On July 25, 2021
Social Media Platforms like Facebook, Instagram, WhatsApp, Twitter and others have always been a prime target for hackers for data breaches and data thefts. The latest popular social media platform called Clubhouse is known for the presence of top influencers and high profile individuals, and is becoming quite famous in recent times for its usability and uniqueness.
As per the tweet from a security researcher Marc Ruef, 3.8 billion phone numbers and contact details of the users of the platform has been announced for auction in the Dark Web.
More on Clubhouse data breach
Clubhouse currently valued at $3 billion dollars, has now been breached into and the statement made in the dark reveals that along with 3.8 billion phone numbers, contact details of the users have also been included in the stolen database. Clubhouse when installed requests access to your phone book, once the access is given, the clubhouse will add any new phone numbers that has been included into your contact list and replicate the same into its database. The below image shows the post from the Dark Web,
Full phone number database of #Clubhouse is up for sale on the #Darknet. It contains 3.8 billion phone numbers. These are not just members but also people in contact lists that were synced. Chances are high that you are listed even if you haven't had a Clubhouse login. pic.twitter.com/PfAkUJ0BL5
— Marc Ruef (@mruef) July 23, 2021
Then, it scans that new phone number to find how many other users within the Clubhouse data breach have the same phone number to identify the popular personalities in the database. The criminals claim that they can even list the top popular personalities based on the national and international level using this scoring metrics associated with the phone numbers and clubhouse database.
The user named ‘I Know A Guy Who Knows Another Guy’ has also published a sample of stolen data as a proof, and it maps to 83.5 million phone numbers of Japanese People.
The user also challenges GDPR authorities and their laws to see if they will sanction Clubhouse or let this slip under another bogus threat. He has also mentioned on Sep 04, 2021 the stolen data will be displayed for an auction and interested people are requested to comment for their interest. It is mentioned that the data will be sold only to one exclusive buyer and not distributed to many.
The exact modus operandi of this data breach is yet to be disclosed, but this looks threatening as Clubhouse has just began their campaign and the users can only be joined based on an invite from the existing users, which makes it look limited for public access. However, unfortunately this data breach news comes as a bummer for Clubhouse and its users.
Subscribe to our newsletter for daily alerts on cyber events, you can also follow us on Facebook, Linkedin, Instagram, Twitter and Reddit.
You can reach out to us via Twitter or Facebook, for any advertising requests.
