Massive Data Breach Exposes 6.5 Million Records at Investing.com

Investing.com has reportedly experienced a significant data breach, with a threat actor claiming to have accessed approximately 6.5 million user records by exploiting an Insecure Direct Object Reference (IDOR) vulnerability. This breach, which allegedly remained active for about a week, resulted in the exposure of sensitive user data, including IDs, email addresses, and registration details. The perpetrator has shared examples of compromised records and indicated that the dataset, which includes information dating back to 2014, is available for sale on BreachForums. As of now, Investing.com has not issued an official response to the incident.

Opens on dailydarkweb.net