A gaggle of hackers is buying and selling a database of stolen info from FlexBooker, a cloud-based device for scheduling appointments, containing delicate buyer knowledge. According to BleepingComputer, the corporate suffered a safety breach earlier than the vacations and notified its clients concerning the assault in an e mail, the place it revealed that its Amazon AWS servers had been compromised on December twenty third. It additionally admitted that its system knowledge storage was accessed and downloaded.

Based on info from Have I Been Pwned, the breach compromised 3.7 million accounts containing e mail addresses, names, passwords, telephone numbers and partial bank card numbers. BleepingComputer says a gaggle known as Uawrongteam took credit score for the assault and shared hyperlinks to archives with the stolen knowledge, which the group claimed additionally embrace customers’ drivers’ licenses, different IDs, password salt and hashed passwords. FlexBooker’s typical clients are individuals who want to have the ability to shortly schedule appointments with purchasers, corresponding to docs, legal professionals, dentists, gyms, mechanics, salons, trainers, therapists, so and and so forth. 

In Flexbooker’s e mail to customers, it stated the infiltrators did not get “any credit card or other payment card information.” We’re guessing the corporate did not take the stolen partial bank card numbers under consideration. Before Flexbooker, Uawrongteam beforehand claimed different knowledge breaches and likewise traded databases with stolen info from its earlier targets. They embrace knowledge from Racing.com, a digital TV community that broadcasts horse racing, and from rediCASE Case Management Software answer for well being companies and different companies.