alert Epik Had A Major Breach

[DaveX]

Just read this. Looks like Epik may have been hacked and sensitive data compromised...

Read here:
https://domainnamewire.com/2021/09/14/hackers-claim-significant-epik-breach/

Thought I would share this.

 

[Grilled]

https://twitter.com/x/status/1439676897592430593

..

More context:

It looks like this Joey sleazeball had registered the .com version of Melissa's twitter handle, ClaudioReport.com, and then redirected it to his joey sleazeball site.

https://twitter.com/AnarchoDoggo/status/1438780628967694336/photo/2

 

[Jurgen Wolf]

What are their prices?

Individual prices.

 

[Jurgen Wolf]

Transfer will be approved/finished automatically on 6th day. It is pending at REGISTRY level...
Just start it and forget.

 

[Grilled]

My opinion on Monday we're going to see folks not showing up to work, as they know their employers are about to find out about their secret lives.

By Friday we're going to hear of actual firings with press releases, as businesses realize that employing terrorists is bad.

https://twitter.com/x/status/1439548447028244481

 

[karmaco]

Transfer will be approved/finished automatically on 6th day. It is pending at REGISTRY level...
Just start it and forget.

yes I am having a hell of a time transferring 4 names. No approve button, wrong auth codes etc. I can’t even believe they are making it harder for us not easier. I am on a chat with Amy and still no auto approval option available

 

[NYJimbo]

Great. I just registered 50+ domains in the past two weeks after thinking things were getting better over there. Fnck.

 

[Lox]

E: 15,003,961
Check if your email/phone: Haveibeenpwned.com

Regards

 

[bmugford]

E: 15,003,961
Check if your email/phone: Haveibeenpwned.com

Regards

Oh no — pwned!

Epik: In September 2021, the domain registrar and web host Epik suffered a significant data breach, allegedly in retaliation for hosting alt-right websites. The breach exposed a huge volume of data not just of Epik customers, but also scraped WHOIS records belonging to individuals and organisations who were not Epik customers. The data included over 15 million unique email addresses (including anonymised versions for domain privacy), names, phone numbers, physical addresses, purchases and passwords stored in various formats.

Compromised data: Email addresses, Names, Phone numbers, Physical addresses, Purchases

 

[Bravo Mod Team]

https://twitter.com/x/status/1439708848659464193

https://haveibeenpwned.com/PwnedWebsites#Epik

https://haveibeenpwned.com/

 

[Lox]

Oh no — pwned!

Epik: In September 2021, the domain registrar and web host Epik suffered a significant data breach, allegedly in retaliation for hosting alt-right websites. The breach exposed a huge volume of data not just of Epik customers, but also scraped WHOIS records belonging to individuals and organisations who were not Epik customers. The data included over 15 million unique email addresses (including anonymised versions for domain privacy), names, phone numbers, physical addresses, purchases and passwords stored in various formats.

Compromised data: Email addresses, Names, Phone numbers, Physical addresses, Purchases

For now, HIBPWNED indexed 15,003,961 ...

 

[mr-x]

Individual prices.

How much does it cost to register a .com? How much money do you have to deposit upfront?

 

[xeroox]

Yay, one of my personal email that i was keeping safe

 

[Mr. Deleted]

https://arstechnica.com/information...of-data-from-epik-web-host-of-gab-and-parler/

you should always check your domain here
http://www.haveibeenpwned.com

 

[xyo]

I don't really get what his problem with scraped (public) Whois Data is.
Apparently that information once was publicly available in whois and either still is nowadays or at least can be accessed via Whois History sites.

 

[Jurgen Wolf]

How much does it cost to register a .com? How much money do you have to deposit upfront?

https://www.internetx.com/en/domains/become-a-reseller/
Submit this form - and they will answer all your questions.
I'm not their representative and not their partner.

Prices depend on your volume.
That's all I can say.

 

[NameWell]

So what actions have you taken? Did you contact your credit card company? If you did, what exactly did you say?

 

[Jurgen Wolf]

I don't really get what his problem with scraped (public) Whois Data is.
Apparently that information once was publicly available in whois and either still is nowadays or at least can be accessed via Whois History sites.

This story is not about WHOIS.
They lost their entire DB backup of Feb'28/March'1.

 

[blockhead]

I'm not going to link to the tweet, for security purposes. But I'm seeing a tweet with sensitive password info and I recognized one of the emails as a NPer, so I've DM'd that member....

Everyone who's ever used Epik really needs to take this very seriously.

 

[Jurgen Wolf]

I have never heard about Gab, Parler etc.
I see them firstly in this thread...
@Rob Monster , why their problems are mine now?

 

[xyo]

This story is not about WHOIS.
They lost their entire DB backup of Feb'28/March'1.

I know, I'm affected myself. I was only referring to the tweets of that Troy Hunt:

https://twitter.com/x/status/1439708848659464193

https://haveibeenpwned.com/PwnedWebsites#Epik

https://haveibeenpwned.com/