Hackers steal donor emails from 'Davayte' and 'Ty ne odin'
Hackers gained access to the offices of charitable projects 'Let's' and 'You Are Not Alone'. Charitable projects 'Let's' and 'You are not alone' reported the hacking of their accounts in the payment system Stripe.
Consensus
- The cyberattack occurred on August 11.
- The breach targeted the Stripe accounts of both 'Davayte' and 'Ty not one'.
- The attack exploited the integration between Stripe and WooCommerce.
- Donors' email addresses were compromised.
- In some cases, the last four digits of bank cards and issuing bank information were leaked.
- Full card numbers, cardholder names, and donation details were not accessed.
- Stripe blocked access before the attackers could extract the full list of emails.
- No fraudulent transactions were detected on the accounts.
- Both projects informed donors via email and published statements on their websites.
- The projects are associated with Russian independent media and organizations recognized as 'undesirable' or 'terrorist' in Russia.
- The projects are not accepting payments from Russian cards.
- Donors are advised to be cautious about digital security and avoid traveling to Russia.
Points of divergence
- The attack lasted 61 seconds according to 'Davayte'. — tg_radiosvoboda
- The projects only disclosed the breach on the day of reporting, which is described as 'today'. — tg_theinsider
- 'Davayte' disabled third-party integrations, regenerated access keys, and notified the European data protection regulator after the breach. — novaya_eu
- 'Davayte' requested Stripe to check for similar activity among other clients, revealing a broader campaign targeting Stripe users. — thebell
- The projects did not detect signs of fraudulent operations. — tg_astrapress
Coverage (7 sources)
- Hackers obtained emails of donors of the "Let's" project and the "You are not alone" marathon — Радио Свобода
- Hackers breached charity projects 'Let's' and 'You are not alone' accounts in Stripe payment service and obtained postal addresses of some donors — The Insider
- Charity projects 'Let's' and 'You are not alone' reported on hack — hackers gained access to email addresses of part... — ЭХО / Новости
- Hackers obtained emails of donors of the "Let's" project and the "You are not alone" marathon — Настоящее Время
- Hackers gained access to charity projects 'Let's' and 'You are not alone' offices — ASTRA
- Hackers gained access to emails of donors of 'Let's' and 'You are not alone' projects — Новая газета Европа
- Hackers obtained emails of donors of the "Let's" project and the "You are not alone" marathon — The Bell