Have I Been Pwned claims Pitney Bowes hit by 8.2M email address leak

Summary

Have I Been Pwned (HIBP) reported that Pitney Bowes was allegedly targeted by threat actor ShinyHunters, resulting in a data leak of approximately 8.2 million email addresses. The stolen data also reportedly includes names, phone numbers, and physical addresses, which were shared on a dark web forum. Pitney Bowes has not yet commented on the incident.

IFF Assessment

FOE

This is bad news for defenders as a significant amount of personal data has been exposed, increasing the risk of further social engineering attacks and identity theft.

Defender Context

This incident highlights the ongoing threat of data breaches targeting large organizations. Defenders should be aware that exposed personal information can be used to craft highly targeted phishing and social engineering attacks against individuals associated with the breached company.

Read Full Story →