TechTakes

The Post Millennial hacked, FUCKING WHOOPS

text of tweet from vx-underground:

====

Yesterday evening The Post Millennial, a Canadian conservative news website, was compromised. The landing page was defaced, displaying the transgender flag, as well as making a satirical post mocking conservative author and social media commentator Andy Ngo.

The Threat Actor(s) responsible for the compromise leaked information on 39,850 subscribers to the website. The leaked information includes:

• Gender
• Name
• Display name
• Nick name
• E-mail address
• Phone number
• Address
• Password
• Subscriber details (payment information)
• 'Daleted' – a boolean field incorrectly spelled
  and more...

Passwords are in plain text. Payment information does not display credit card information. Payment information displays preferred payment method (e.g. PayPal, Credit Card, Debit Card) and currency used (e.g. CAD, USD). Some fields are optional such as telephone number or address. Additionally, this leak unveils some information on government representatives across the globe – including United States government personnel. This displays their contact information in plain text.

Also, the Threat Actor(s) leaked information on authors for The Post Millennial editors. We are not sure on the validity of this data, unless this website has 761 editors. Editor information disclosure shows:

• Username
• IP Address
• Phone number
• Country
• Email address
• Name

Image 1. Snippet of leaked subscriber information
Image 2. Snippet of leaked editor information
Image 3. Defaced website and satirical post

Note:

• No Threat Actor(s) have taken credit for the compromise

• Individuals reviewing the data suspect the parent company, Psyclone Inc, may have been the initial access point. Evidence supporting this is debug data present in The Post Millennial database dump as well as adjacent website HumanEvents going offline – however this still remains speculation.

• The compromise of The Post Millennial is clearly politically motivated. Please be civil.

====

and in conclusion: lololol

they also got humanevents.com and bonginoreport.com