alert Epik Had A Major Breach

[DaveX]

Just read this. Looks like Epik may have been hacked and sensitive data compromised...

Read here:
https://domainnamewire.com/2021/09/14/hackers-claim-significant-epik-breach/

Thought I would share this.

 

[.X.]

Post something @robmonster or have one of your staff post something in this forum ... this is a travesty for the consumer ..

 

[.X.]

If you're staying @ E ... change your whois email (for admin and tech) asap.

do you think they are going to hack the damn email too ?? or just have butt loads of spam sent?? or??

 

[.X.]

@robmonster stay off the damn zoom and facetime talking to nazi people and nut jobs... you are better than to engage with those people ...

 

[Jurgen Wolf]

If they lose zero domains they can still call themselves the swiss bank

No any evidence that those hackers even tried to steal any domains.

 

[Lox]

do you think they are going to hack the damn email too ?? or just have butt loads of spam sent?? or??

Spamming for sure

 

[noneisnone]

while all this is going on i pm Rob to ask him to charge my account using paypal and i get a reply almost instant this guy is great and anything he is involved in will be great never felt so appreciated as a customer ^^
wish him and epik the best

 

[Beezy]

Someone just posted:

"there are soooooo many credit cards in the Epik data leak. In one table I found 35k sets of unique credit card numbers, names, expirations, cvv, billing info. Here's a snippet of redacted numbers and names."​

 

[Jurgen Wolf]

So according to the posted data on previous page - Epik had up to 1.5M domains under their management as of March'1.

Now (including upcoming deletes) they have ~4.5 times less.
https://domainnamestat.com/statistics/registrar/Epik_Inc_-IANA_ID-617

@Rob Monster
You may also explain via another channel like Twitter...

 

[Grilled]

Someone just posted:

"there are soooooo many credit cards in the Epik data leak. In one table I found 35k sets of unique credit card numbers, names, expirations, cvv, billing info. Here's a snippet of redacted numbers and names."​

https://twitter.com/x/status/1439311680131907589

 

[Beezy]

@Rob Monster
You may also explain via another channel like Twitter...

The search used to get that list could have been from done to a wider pool of names that aren't just under Epik, for example.

I kept remembering the journalist during that video confrontation asking about two shell companies, but I am completely ignorant to those details.

Moreover, in that tweet thread, someone speculated that those totals included Rob's own speculative holdings outside of Epik customers, etc.

I'm sure next week things will be more clear.

 

[Jurgen Wolf]

It's not 5 times less, is it?

Including upcoming deletes it is ~4.5 times less.
See my updated post again.

 

[blockhead]

Sounding more and more like a worst-case scenario breach then. Obviously all those cards need cancelled.

Let's see if the domains are safe or will be stolen or somehow mass-deleted?

 

[jmcc]

Again, something is not adding up here.

It is a rather odd interpretation of ICANN data and may not be accurate due to the way that registrars report their transactions. The numbers given for some gTLDs on that site are obviously very wrong.

Regards...jmcc

 

[Start]

Including upcoming deletes it is ~4.5 times less.
See my updated post again.

I think you're doing the math wrong though.

1.5 million divided by 4.5 = 333,333

Oh, I see that you're counting "Upcoming deletes" within the "Registered domains" total. But I think they're separate numbers, such that the first is not a subset of the second.

Anyway, it certainly is a high number though. It's also possible some are for "domain tasting", although probably only a small portion.

Also, as detailed earlier, domainnamestat.com just doesn't seem to know full stats. The hack apparently says Epik had 1.5 million domains as of March 2021, but domainnamestat.com's graph thinks they only had 521,000.

 

[Jurgen Wolf]

What I'm doing wrong???
Registered domains minus upcoming deletes = 1.5M divided by 4.5

 

[Start]

I added this to my post before I saw your reply:

Also, as detailed earlier, domainnamestat.com just doesn't seem to know full stats. The hack apparently says Epik had 1.5 million domains as of March 2021, but domainnamestat.com's graph thinks they only had 521,000 as of March 2021.

The graph is at the bottom here:
https://domainnamestat.com/statistics/registrar/Epik_Inc_-IANA_ID-617

And I think upcoming deletes aren't a subset of registered domains (I don't know though).

 

[Jurgen Wolf]

And they are not separate, notice percentage...

Upcoming deletes 279,329 (45.57%)

 

[Jurgen Wolf]

It is a rather odd interpretation of ICANN data and may not be accurate due to the way that registrars report their transactions. The numbers given for some gTLDs on that site are obviously very wrong.

Regards...jmcc

What resource is really reliable?

 

[jmcc]

This is the link for the ICANN registry reports for .COM
https://www.icann.org/resources/pages/com-2014-03-04-en
The current report is for May 2021 because ICANN publishes the reports with the 3 month delay.

Regards...jmcc

 

[Start]

And they are not separate, notice percentage...

Upcoming deletes 279,329 (45.57%)

Oh yeah, I guess they are a subset then.

Still though, domainnamestat.com's own figures for March 2021 are 3 times less than what the hack revealed.

And their stats for Sept 2020 are 50% less than what domainstate.com says.

So I don't think their figures are accurate for total domains.

But 279,000 is a very high number to be in redemption though. That probably is an accurate number, because I think registries report which domains are in redemption.

But for total figures, I'm basically just saying we can't really rely on the numbers at domainnamestat.com or similar sites, because they seem to only be estimates... and we can see that their earlier estimates weren't accurate.