Share this article on:
Threat actors have claimed a cyber attack on Australian consumer electronics and computing store digiDirect.
A threat actor by the name of Tanaka posted on Breach Forums saying that a database had been exfiltrated containing 304,000 rows of data belonging to digiDirect.
According to the post, the database contains names, emails, phone numbers, billing and shipping addresses, street addresses, country, state, province, zip code, billing names, contact numbers, date and AIPP-verified status.
The threat actor, who seemingly credited the attack to another threat actor by the name of “Chucky”, posted a sample of the data with a number of names, email addresses, dates and more belonging to Australians.
In another post, Tanaka accused another threat actor of selling “public stuff”, referring to their post and linking another now-deleted post containing the same data.
However, another BreachForums user suggested the data was posted by a number of people, with one threat actor listing it for sale before “Chucky” published.
“It looks like he created a sale message 1 minute BEFORE Chucky published it. And then Chucky published the data on Leakbase … and then you published it on Breachforums.”
Cyber Daily reached out to digiDirect for comment on the issue and is currently awaiting a response.
Earlier this month, threat actors claimed an attack on Aussie hardware chain Total Tools, claiming to have the data of 38,000 customers.
The company is currently investigating the matter, which it first discovered when it detected suspicious activity on its systems.
Initial investigations by a third-party cyber forensics team suggest that the data of 38,000 customers was compromised.
Data reportedly includes names, log-on details, email addresses and credit card information.
According to media reports, investigations into the nature and size of the incident are still ongoing.