A database has been stolen from Nitro PDF that contains email addresses, names, passwords of about 77 million users, later the stolen database is leaked on the internet for free.

Nitro application permits the users to create, sign PDFs, and edit digital documents. The company is now dealing with 10,000 businesses and it has 1.8 million licensed users. Nitro also provides cloud services to the customers, so that the data is easily shareable with others when needed.

The size of the database is about 14GB that contains around 77,159,696 user records that include their personal information like company name, IP addresses, email, hashed password, and other information.

Whereas the database is added to dehashed.com, which permits the users to check the information and status of the data breach and what data is leaked on the Internet.

Now, read the upcoming section to know about the Nitro data breach and also read about why data is leaked on the internet for free.

Nitro Data Breach

Last year Nitro go through a massive data breach along with a well-established organization that includes Google, Microsoft, Apple, Chase, and Citibank.

Whereas on 21 October 2020, Nitro spokesperson disclosed that a low-impact security attack happened on Nitro but they also said that all thing is under control and no customer data is impacted.

After that researcher find out that the data leaked from Nitro PDF is got auctioned with other documents with the starting price of $80,000. Therefore the experts confirm the stolen data is from Nitro PDF after matching it with the Nitro account.

Now the attacker behind this campaign was claiming to be part of ShinyHunter and leaked full of the database for free on several hacker forums. Where the attacker also sets a price of $3 while getting access to the download link.

ShinyHunters is the group of actors that were known for online hacking and selling the information stolen from data breaches or from private sales.

Last year, Shiny Hunters caught behind the data breaches at several places that include Dave, Promo, Chatbooks, Mathway, Minted, Homechef, Tokopedia, and many others.

At the End

These data breaches caused multiple problems, the attackers also used the stolen data for phishing attacks and credential stuffing. Affected users are advised to change their passwords that they don’t use at any online service. Users should use the password manager tool for better results, the tool assists the users while generating strong and unique passwords for different sites. Keep updated and keep secured