Claim: Actor offers 19,400 Hootsuite corporate records for sale
An actor known as webshell is selling an alleged dataset of 19,400 records from Hootsuite, the Canadian social media management platform, for $15,000. The data reportedly includes user names, emails, organization names, tenant IDs, account permissions and invoice history. The claim is unverified.
What happened
An actor named webshell is advertising a dataset of 19,400 alleged Hootsuite corporate records for $15,000. The listing says the data would include names, emails, organization names, tenant IDs, permissions, and invoice history. According to DarkWebInformer, the claim is unverified.
Why it matters
If real, the data could expose customer organizations to targeted phishing, billing fraud, and account takeover. Tenant IDs and account permissions would give attackers context for attacks aimed at marketing and communications teams.
What to do
Ask the security team to track verification of the claim, enforce multi-factor authentication on Hootsuite, and review who can access billing and account permissions.
For the technical team
- Affected
- Hootsuite Base alegada de 19,4 mil registros corporativos da Hootsuite, plataforma canadense de gestão de redes sociais · Hootsuite, Canadian social media management platform; 19,400 alleged corporate records.
- Exploitation
- Sale advertised by actor webshell for $15,000, reported by DarkWebInformer on X; claim unverified.
- Fix
- No software fix; the source cites risk of targeted phishing, billing fraud, and account takeover.
- Vector
- Alleged database leak; the acquisition method was not stated in the source.
- More details
- Alleged fields: user names, email addresses, corporate organization names, tenant IDs, account permissions, enabled features, and invoice history. The source gives no breach date or method.
Timeline
Social media post announces sale of alleged 19,400-record Hootsuite corporate dataset.
Sources 1 source
- @DarkWebInformer @DarkWebInformer
