Eye4Fraud SiteName values

Eye4Fraud-SiteName-Values.csv

I wonder if there would be a way to make the SiteName field searchable by email (in a safe manner that would not risk exposing more data of course).

That's quite a list to go through one by one when you have no idea which transaction could have been linked to them.

I did this once as a trial for the GeekedIn breach: https://www.troyhunt.com/8-million-github-profiles-were-leaked-from-geekedins-mongodb-heres-how-to-see-yours/

It's high-overhead and just not something I can justify investing time into. I'd much rather see pressure put on Eye4Fraud to properly disclose this incident and advise impacted parties appropriately.

Thanks @troyhunt, I notified #58 (Di Bruno Bros.) since that's where I believe my data came from.

Thanks for doing that,, hope it gets traction.

BTW - it may not be 100k customers, rather 100k transactions as conceivably the same customer may make multiple purchases. But that's exactly what you'd learn from a proper disclosure statement...

The fact that Shopify (1650) uses them makes it even worse.

I wonder if there would be a way to make the SiteName field searchable by email (in a safe manner that would not risk exposing more data of course).

That's quite a list to go through one by one when you have no idea which transaction could have been linked to them.

I wrote a small script to check list of websites against my email account at: https://gist.github.com/hiteshseth/89c4741a615815c3bb83f1cd6604f64e#file-checkbreachwordsinemail-py

I don't have access to breach database like Troy, so what I have assumed is that if I shopped at these merchants I would have received atleast one email from them. So the script when run asks for keywords separated by comma as first input for which I entered first column of this csv separated by comma. Then you need to use email address and password. In case you are using gmail and your usual gmail password doesn't work then refer to: https://support.google.com/accounts/answer/185833

Pasting Google's instruction below in case link moves:

Create & use app passwords
Important: To create an app password, you need 2-Step Verification on your Google Account.

If you use 2-Step-Verification and get a "password incorrect" error when you sign in, you can try to use an app password.

Go to your Google Account.
Select Security.
Under "Signing in to Google," select 2-Step Verification.
At the bottom of the page, select App passwords.
Enter a name that helps you remember where you’ll use the app password.
Select Generate.
To enter the app password, follow the instructions on your screen. The app password is the 16-character code that generates on your device.
Select Done.

Just got notified that my data was breached... from Google, not from eye4fraud or any vendors. Several months late, apparently. Thank you for this data set, it gives me a place to start looking.

lol i got my notice from credit karma just today. seeing "shopify" just generally in there is unsettling. thanks eye4fraud, really doing the lord's work letting people know about the breach

I'm number 1152 on the list Electronic Express Tennessee. Ordered a Seiko watch from them years ago so it's my old credit card and phone number. "No Sleep Till Brooklyn!"