Attacker Sanjero claims to own the entire database of Pandabuy

There’s some news in the cybersecurity space as the attacker Sanjero claims to own the entire database of Pandabuy ( Pandabuy.com ), a well-known online marketplace.

The compromised database reportedly contains a staggering 17 million rows of user records, including sensitive data such as first names, last names, user IDs, email addresses, order data, IP addresses, countries, passwords and more.

The perpetrator of the threat, Sanjero, issued a statement of his intentions. They claim that the vulnerabilities used to breach Pandabuy’s security, which are said to have gone unnoticed by the company, will soon be made public on the attacker’s blog. Moreover, they stated their intention to reveal the names and passwords of Pandabuy employees, albeit in encrypted form using Base-64 encryption.

The attacker warned Pandabuy that negotiations were still possible, but time was running out. They set a hefty price of $40,000 for the compromised database, signaling their willingness to sell the stolen data to the highest bidder.

PS correct me, but wasn’t it already leaked before?! It seems to me that she has been in the private channel for a long time already with subscribers🧐 need to double check