alert Epik Had A Major Breach

[DaveX]

Just read this. Looks like Epik may have been hacked and sensitive data compromised...

Read here:
https://domainnamewire.com/2021/09/14/hackers-claim-significant-epik-breach/

Thought I would share this.

 

[Jona4s]

holy fuck, that's a lot of new data.

 

[finitecrystal]

Just when I thought things were getting boring, they got a lot more interesting.

EDIT: That's a lie, it never stopped being interesting, it just got exhausting.

 

[Kirtaner]

( ͡° ͜ʖ ͡°)

 

[Jona4s]

They are also bleeding domains. -9% just today.

@ https://dailychanges.domaintools.com/

 

[dirk]

Epik purchased a company called Cityinformation BV,

C BV was acquired by Digital Town not E, his former gig as a CEO.

Doesn't take away from the fact he should be GDPR compliant though.

 

[bmugford]

C BV was acquired by Digital Town not E, his former gig as a CEO.

That ended poorly as well.

DigitalTown “clean up efforts” to avoid bankruptcy

https://domainnamewire.com/2019/06/06/digitaltown-clean-up-efforts-to-avoid-bankruptcy/

 

[Evil.dll]

C BV was acquired by Digital Town not E, his former gig as a CEO.

Doesn't take away from the fact he should be GDPR compliant though.

Glad you brought digitaltown into the mix. It seems that they are experiencing a 12% gain on the day as of last night. For a company whose assets are mostly archaic software that is used by few, if any companies and as Epik is a subsidiary of digitaltown, at least they are listed as such, with Epik CEO being listed as its primary creditor that leaves a whole new level to this, which upon assessment may reveal more than just a data breach, but I will leave that to someone with the time and knowledge of SEC compliance to sort out.

 

[bmugford]

Glad you brought digitaltown into the mix. It seems that they are experiencing a 12% gain on the day as of last night. For a company whose assets are mostly archaic software that is used by few, if any companies and as Epik is a subsidiary of digitaltown, at least they are listed as such, with Epik CEO being listed as its primary creditor that leaves a whole new level to this, which upon assessment may reveal more than just a data breach, but I will leave that to someone with the time and knowledge of SEC compliance to sort out.

What fortunate timing!

 

[Mr. Glomar]

As owner of some valuable domains myself and former customer of Epik, at this point I can only recommend to anyone that's still an Epik customer to get the heck off it and move your domains to a safer place.

At least put your "most valuable" domains in a safer place.

For what it's worth, most of my personal and most valuable domains are kept at Cloudflare now, just because security is their focus.

You need to weigh the "costs of moving" against the potential of "losing domains altogether".

Is it worth the risk? Maybe, maybe not.

 

[bmugford]

As owner of some valuable domains myself and former customer of Epik, at this point I can only recommend to anyone that's still an Epik customer to get the heck off it and move your domains to a safer place.

At least put your "most valuable" domains in a safer place.

For what it's worth, most of my personal and most valuable domains are kept at Cloudflare now, just because security is their focus.

You need to weigh the "costs of moving" against the potential of "losing domains altogether".

Is it worth the risk? Maybe, maybe not.

Also, if anyone is holding a balance in Epik "Masterbucks" you might want to consider your options. Just saying.

Brad

 

[Future Sensors]

A courtesy note for Epik customers who have stated in solidarity that they will move even more of their domains to Epik because of the data breach: be wary and decide for yourself when it might no longer be wise to do so at this moment .

 

[scithe]

I saw the Experian offer too. I worry that credit monitors would end up having a power that would interfere with my use of credit cards. Like I just flew from FL to NV and back over 4 days. During that time I used a certain credit card at least 24 times in 4 different states. Would a credit monitor cause my card to decline while I'm trying to buy a round of shots?

 

[Paul]

Would a credit monitor cause my card to decline while I'm trying to buy a round of shots?

No. Even a credit freeze or credit lock would not have that effect; those are purely to discourage companies from opening new lines of credit in your name without additional authentication. On its own, credit monitoring doesn't even do that; it gives you insight into whether anyone is attempting to open lines of credit in your name, but it won't inhibit those attempts or provide timely information about attempts to use your existing credit cards.

Edited for clarification.

 

[Windoms]

Also, if anyone is holding a balance in Epik "Masterbucks" you might want to consider your options. Just saying.

Brad

I have 16 ou 18 dollars there.
A gift to epik.

A courtesy note for Epik customers who have stated in solidarity that they will move even more of their domains to Epik because of the data breach: be wary and decide for yourself when it might no longer be wise to do so at this moment .

 

[bmugford]

https://www.dailydot.com/debug/anonymous-new-epik-leak/

WhiskeyNeon, a Texas-based hacker and cybersecurity expert who reviewed the file structure of the leak, told the Daily Dot how the disk images represented Epik’s entire server infrastructure.

“Files are one thing, but a virtual machine disk image allows you to boot up the company’s entire server on your own,” he said. “We usually see breaches with database dumps, documents, configuration files, etc. In this case, we are talking about the entire server image, with all the programs and files required to host the application it is serving.”

The data includes API keys and plaintext login credentials for not only Epik’s system but for Coinbase, PayPal, and the company’s Twitter account.

 

[ixex]

luckily the credit card that I used there once or twice that has been sitting in the account was expired already awhile back lol

 

[Windoms]

Last one
A nice and helpful lady made a cute trustpilot review on september 20th.
Seems like she thought there was top notch security blazingly fast firewall. Like those quick lasers in the movies around diamonds when thieves enter by the roof.
If only she knew

 

[Windoms]

(She better change her passwords)

 

[Future Sensors]

The second breach / data leak mentioned on Twitter by Brian Krebs of KrebsOnSecurity.

https://twitter.com/x/status/1443364644849168384

 

[jmcc]

https://www.dailydot.com/debug/anonymous-new-epik-leak/

WhiskeyNeon, a Texas-based hacker and cybersecurity expert who reviewed the file structure of the leak, told the Daily Dot how the disk images represented Epik’s entire server infrastructure.

Bloody Hell! It is going to be difficult for Epik to deal with the fallout from this and there's an ICANN meeting coming up next month.

Regards...jmcc