Eye4Fraud eye4fraud.com Eye4Fraud data breach: what happened and what to do
In February 2023, data alleged to be from fraud protection service Eye4Fraud was listed for sale on a hacking forum, with 16,000,591 unique email addresses. It included names, phone numbers, addresses, IP addresses, partial card data and bcrypt password hashes. Eye4Fraud did not respond to HIBP.
View all 13,115 breaches- Breach date
- 25 Jan 2023
- Affected
- 16,000,591
- Data exposed
- Email addresses, IP addresses, Names, Partial credit card data, Passwords, Phone numbers, Physical addresses
- Verified
- Yes
- Last updated
Source: Have I Been Pwned (CC BY 4.0)
What happened
Eye4Fraud is a fraud protection service that online stores use to screen orders. In February 2023, data alleged to have been taken from it was listed for sale on a hacking forum. Have I Been Pwned says the data spanned tens of millions of rows with 16,000,591 unique email addresses, spread across 147 tables and 65GB. HIBP also says Eye4Fraud did not respond to multiple attempts to report the incident.
The people affected include direct users of the service and, it appears, shoppers who placed orders at other stores that used Eye4Fraud. You may be in the data without ever having heard of the company.
What was exposed
The data included names and bcrypt password hashes for users. For orders it held names, phone numbers, physical addresses and partial credit card data (card type and last 4 digits), plus email and IP addresses. Bcrypt is a slow hashing method, so weak or common passwords can still be cracked.
What that lets criminals do
Order data with a name, address and phone number lets scammers send believable "problem with your order" messages. Card type plus the last 4 digits is not enough to charge a card, but it makes a fake refund or bank message look real. If you used a user password on Eye4Fraud and reused it elsewhere, that is the bigger risk.
What to do
Change any password you reused, turn on two-factor login, and be careful with order-related messages.
What to do if you were in it
- 1
Change any reused password
If you have an Eye4Fraud login, change that password and any other account where you used it. A password manager makes unique passwords easy.
- 2
Turn on two-factor login
Use an authenticator app or passkey on important accounts so a leaked password alone isn't enough.
- 3
Be suspicious of order and refund messages
Your name, address, phone number and the last 4 digits of a card were exposed. Scammers can use them for fake order problems. Contact the store or bank directly.
- 4
Check whether your email or phone is in this and other breaches
Run a free Serus scan. Serus monitors breach databases and the dark web and alerts you when your details show up in a new leak.
Frequently asked
Was I affected by the Eye4Fraud breach?
Have I Been Pwned lets you check your email address. You may be in the data if you bought from an online store that used Eye4Fraud, even if you never heard of it.
What was exposed?
Names, emails, phone numbers, physical addresses, IP addresses, bcrypt password hashes and partial credit card data (card type and last 4 digits).
Should I change my password?
Yes, if you had an Eye4Fraud account or reused that password anywhere. Bcrypt hashes are hard to crack but weak passwords can still fall.
Sources
Something wrong or out of date? Tell us and we'll re-check it.
