🇵🇱 Alleged database belonging to
Home.pl has been advertised on a cybercrime forum, with the threat actor claiming to possess approximately hundreds of thousands of customer records containing account, contact, and website activity data.
* Threat actor claims the dataset originates from
Home.pl, one of Poland’s largest hosting and domain service providers
* Advertised data includes customer names, email addresses, postal addresses, usernames, phone numbers, dates of birth, and account metadata
* Login password hashes are reportedly included rather than plaintext passwords
* Additional records allegedly contain website session tracking data, user activity metrics, engagement statistics, and marketing campaign information
* Dataset appears to combine CRM, web analytics, and customer management records
* Potential Impact:
* Targeted phishing campaigns against
Home.pl customers
* Credential cracking attempts against hashed passwords
* Account takeover risks where passwords are reused elsewhere
* Enhanced social engineering using personal and account information
* Business intelligence exposure through marketing and engagement data
* Analyst Note: The advertised structure resembles a blend of CRM, customer support, web analytics, and marketing datasets. The presence of password hashes, customer contact information, and website session data would make the dataset particularly valuable for cybercriminals if authentic. At this stage, the origin of the data and any attribution to
Home.pl remain unverified and require independent validation.
#DDW #Intelligence #Poland #HomePL