Clubhouse suffered from data leak exposing 1.3 million scraped data for free

Clubhouse was recently discovered to be in the same queue before joining the bandwagon of data breaches that have been active for the past week, followed by Facebook & LinkedIn

AnyConv.com__yKtY0R8EH0zu_lTv7YQMVWesFtSMSsKrdvAzQjIu8cOPADwFOqnLca-CHdgQhnTtVTzbGe5dcrmavl5J5vjaugrgjbWMOIeWUJLRtO9ocTeqbCCjncbhYvVsc5cjTvfcyHt44RKh

However, even this time also the scenario is pretty similar to what LinkedIn experienced for their scrapped data of perhaps 827 million profiles as an SQL database containing 1.3 million scraped Clubhouse user details were listed for free on the same infamous hacker forum. This revelation came into the spotlight from an explicit ad circulating across the hacker forum spotted by the security researcher at CyberNews.

Although contrary to the data breach allegations, Clubhouse blatantly denied by citing that there wasn't any data breach experienced in their system, besides the all those leaked data were already publicly accessible via their API, which raises some serious privacy concerns on company's user data policy enabling to gather even public profile details on a mass scale by anyone on the internet.

This is misleading and false. Clubhouse has not been breached or hacked. The data referred to is all public profile information from our app, which anyone can access via the app or our API. https://t.co/I1OfPyc0Bo
— Clubhouse (@joinClubhouse) April 11, 2021

The scraped database of 1.3million Clubhouse users contains User ID Name, Photo URL, Username, Twitter handle, Instagram handle; Followers count, Number of people followed by the user, Account creation date & Invited user profile name.

As there can be various unimaginable consequences associated with this incident like any other previous ones, including targeted phishing or different types of social engineering attacks.

Clubhouse suffered from data leak exposing 1.3 million scraped data for free

Related threat feeds

Daxin Malware Resurfaces in Taiwan Alongside Novel Stupig Backdoor After Decade Long Silence

148 Malicious npm Packages Used to Build a Browser Based DDoS Botnet

Pakistan Law Enforcement Agencies Targeted in Alleged Multi Group Cyber Espionage Operations