Hacker claims data breach on City of New York
Learn More
A threat actor identified as “pwns3c” claims a data breach on the City of New York’s official website and is listing the supposed stolen data for sale on BreachForums. The City of New York’s website is a critical platform providing official information and services, including alerts, 311 services, news, and event information.
This breach allegedly includes a database containing 199 PDF files, approximately 70MB in total, with personally identifiable information (PII). The details exposed are:
- Licensee Serial Number
- Expiration Date
- Applicant or Licensee Name
- Trade Name
- Street Address
- City
- Zip Code
- Phone Number of Applicant
- Business Email of Applicant
Additionally, the hacker claims to have stolen sensitive information about building owners, attorneys, and individuals, including their Employer Identification Number (EIN), Social Security Number (SSN), and signatures.
The number of affected individuals and the nature of the attack are not disclosed.
The stolen information is being sold for $30, with potential buyers directed to contact the seller via private messages on BreachForums or through their Telegram handle. Sample data is also allegedly available for download through links provided in the post.
The Cyber Express has reached out to the New York City mayor’s office for confirmation, but no response has been received.
