One million accounts of StreetEasy have been hacked

Around one million accounts of StreetEasy have been hacked. The information of these accounts was put for sale on dark web, confirmed StreetEasy on the evening of February 19, 2019, Tuesday.

Inman was told by Lauren Riefflin, the company spokesperson, that StreetEasy came to know about the hack when they see reports that their user information was put for sale online. Riefflin said that the stolen data comprises of user names, email addresses and encrypted passwords.

As per an emailed statement, the company also said that the investigation revealed "that phone numbers, the last four digits, card type, expiration dates, and billing addresses of some mostly expired customer credit cards may also have been accessed". Emily Heffter, Communications Director of StreetEasy, said that the hacked information didn't have the complete credit card numbers or CVC/CVV codes.

Riefflin described that the source of stolen information was "an old data file from 2016 or earlier". The company spokesperson, Riefflin also said that most of those data have expired and there were no raw passwords. The breach has affected around one million accounts of StreetEasy, and their user information was put for sale on dark web.

Although the company has not disclosed publicly how this data breach happened, but Riefflin said that StreetEasy is taking number of measures for ensuring that their systems remain safeguarded. Those measures also included sending email to the users on February 19, 2019, and telling them to change their passwords. The February 19 email further mentions that what kind of information has been stolen and also explains that StreetEasy recently came to know about this hack.

StreetEasy functions as both sales as well as rental portal that focuses on the New York City. Zillow owned the company, although the company spokesperson - Riefflin - said that this data breach has not affected the parent company. StreetEasy in its statement on February 19, 2019, said that they take the security as well as privacy of users' information very seriously. "We are taking a number of actions to strengthen our internal safeguards to protect against future attempts to gain unauthorized access to our systems," the company statement added.

» SPAMfighter News - 3/7/2019