{"id":1141,"date":"2024-08-30T04:04:31","date_gmt":"2024-08-30T04:04:31","guid":{"rendered":"https:\/\/xdr-mdr.lmntrix.com\/main_web\/?p=1141"},"modified":"2025-07-29T07:47:20","modified_gmt":"2025-07-29T07:47:20","slug":"a-datadrop-in-the-ocean-digitalocean-hacked-exposing-bollywood-stars","status":"publish","type":"post","link":"https:\/\/lmntrix.com\/blog\/a-datadrop-in-the-ocean-digitalocean-hacked-exposing-bollywood-stars\/","title":{"rendered":"A (Data)Drop In The Ocean – DigitalOcean Hacked? Exposing Bollywood Stars?"},"content":{"rendered":"
\n
\"\"<\/figure>\n<\/div>\n\n\n

DigitalOcean is a US-based cloud computing company headquartered in NY.  As of 2015, it was the second largest hosting company in the world in terms of web-facing computers.  <\/p>\n\n\n\n

It appears that one or more of its databases have been hacked and confidential information leaked.  We have informed the company of the suspected breach.<\/p>\n\n\n\n

The leak has been posted at the following URL and seems to reveal logins but, as per best practice, hashed passwords:<\/p>\n\n\n\n

http:\/\/cppxwkp35scoo2bk.onion\/files\/digitalocean.txt<\/p>\n\n\n\n

The breach seems to have exposed login details for Bollywood mega stars Shah Rukh Khan and Hrithik Roshan. <\/p>\n\n\n\n

Neither US presidents nor Bollywood stars seem immune to high-profile breaches.  As per our standard practice, LMNTRIX has advised DigitalOcean of the potential breach, but as of publication, we have not received any response.<\/p>\n\n\n\n

Below are select sections of the potential breach.<\/p>\n\n\n\n

DigitalOcean is a US-based cloud computing company headquartered in NY.  As of 2015, it was the second largest hosting company in the world in terms of web-facing computers.  <\/p>\n\n\n\n

It appears that one or more of its databases have been hacked and confidential information leaked.  We have informed the company of the suspected breach.<\/p>\n\n\n\n

The leak has been posted at the following URL and seems to reveal logins but, as per best practice, hashed passwords:<\/p>\n\n\n\n

http:\/\/cppxwkp35scoo2bk.onion\/files\/digitalocean.txt<\/p>\n\n\n\n

The breach seems to have exposed login details for Bollywood mega stars Shah Rukh Khan and Hrithik Roshan. <\/p>\n\n\n\n

Neither US presidents nor Bollywood stars seem immune to high-profile breaches.  As per our standard practice, LMNTRIX has advised DigitalOcean of the potential breach, but as of publication, we have not received any response.<\/p>\n\n\n\n

Below are select sections of the potential breach.<\/strong><\/p>\n\n\n\n

{ “_id” : “2bGLq3WxgPomM8NdS”, “createdAt” : ISODate(“2017-01-20T08:40:39.169Z”), “services” : { “password” : { “bcrypt” : “$2a$10$mMDsBkYd83Odq4aX45Iz9.0rAUQTA6NC5mAKUf2bMaMCdAhrBSIk2” }, “resume” : { “loginTokens” : [ ] } }, “username” : “2”, “emails” : [ { “address” : “2@mailinator.com”, “verified” : false } ], “profile” : { “un” : “2”, “username” : “2”, “user_id” : “2bGLq3WxgPomM8NdS”, “user_type” : “password”, “name” : “Shah Rukh Khan”, “first_name” : “Shah”, “last_name” : “Rukh”, “email” : “2@mailinator.com”, “link” : “https:\/\/app.linkwok.com\/user\/2”, “gender” : null, “service_id” : null, “created_at” : ISODate(“2017-01-20T08:40:39.171Z”), “display_pic” : “\/images\/default_user.png”, “location” : { “country” : null }, “country” : null, “first_time” : true, “subscribed” : true }, “email” : “2@mailinator.com” }<\/p>\n\n\n\n

members <\/strong><\/p>\n\n\n\n

{ “_id” : “EQqGT2fpxoF8hrMD8”, “user_id” : “HpkzKCZrTBFfSsqKE”, “tenant_id” : “fovGxLmrYKezDbj62”, “role” : “superadmin”, “role_id” : “fedf611c654a8284022c4d81”, “custom_data” : { “stats” : { “ar_for_me” : 3, “ar_by_me” : NaN } } }<\/p>\n\n\n\n

{ “_id” : “yG2dcD5kE4SJGo8qq”, “user_id” : “QaKc4yjgN9NCGBR82”, “tenant_id” : “fovGxLmrYKezDbj62”, “role” : “member”, “role_id” : “214e3453380aa7e17e8e833c” }<\/p>\n\n\n\n

{ “_id” : “AkRDWbjRbar4unYH5”, “user_id” : “6WzLjSkzeuDhNLtj6”, “tenant_id” : “3cxaoftkxBFkxikuk”, “role” : “superadmin”, “role_id” : “803a94ee0cda1b99ef4f63a5” }<\/p>\n\n\n\n

{ “_id” : “SQt3d6PMrMMruWzC4”, “user_id” : “knfgJ3muacSTqmRck”, “tenant_id” : “3cxaoftkxBFkxikuk”, “role” : “member”, “role_id” : “438edd37a7aa96eba9a5fc0d” }<\/p>\n\n\n\n

social<\/strong> <\/p>\n\n\n\n

{ “_id” : “zz2ay2NYQBMuw63kA”, “service” : “facebook”, “appId” : “738734916167564”, “secret” : “f3fe0ecfb6393fb31c7bf538dca3f93a” }<\/p>\n\n\n\n

{ “_id” : “CyrFPfyn2NCdwz2zF”, “service” : “google”, “clientId” : “979859604471-46jop4obkkebhhhrfr96fdtgrra485bj.apps.googleusercontent.com”, “secret” : “HMpUYJHQw-LD-41P1zs5kklF” }<\/p>\n\n\n\n

{ “_id” : “q5KLbXYM9JPCZ5nuH”, “service” : “twitter”, “consumerKey” : “ZuUtTXOE2whoO194uZrrK0jLa”, “secret” : “Ek9doCVC0lv38WMn6jYBdVtBs5OvSAeOgkv1JL5L6jhcxvfblH” }<\/p>\n\n\n\n

tenants <\/strong><\/p>\n\n\n\n

{ “_id” : “fovGxLmrYKezDbj62”, “name” : “Kaabil”, “created_at” : ISODate(“2017-01-20T05:50:52.419Z”), “location” : { “country” : null }, “admin_email” : “1@mailinator.com”, “updated_at” : ISODate(“2017-01-20T05:50:52.419Z”) }<\/p>\n\n\n\n

{ “_id” : “3cxaoftkxBFkxikuk”, “name” : “teamgc”, “created_at” : ISODate(“2017-01-20T06:03:54.073Z”), “location” : { “country” : null }, “admin_email” : “gcteam@mailinator.com”, “updated_at” : ISODate(“2017-01-20T06:03:54.073Z”) }<\/p>\n\n\n\n

{ “_id” : “DY3J45EzQwStTJMEC”, “name” : “Dear Zindagi”, “created_at” : ISODate(“2017-01-20T08:40:39.049Z”), “location” : { “country” : null }, “admin_email” : “2@mailinator.com”, “updated_at” : ISODate(“2017-01-20T08:40:39.049Z”) }<\/p>\n\n\n\n

{ “_id” : “cu9J4otaM8dvmkuCd”, “name” : “DPL”, “created_at” : ISODate(“2017-01-23T09:12:29.076Z”), “location” : { “country” : null }, “admin_email” : “9@mailinator.com”, “updated_at” : ISODate(“2017-01-23T09:12:29.076Z”) }<\/p>\n\n\n\n

users information<\/strong><\/p>\n\n\n\n

{ “_id” : “HpkzKCZrTBFfSsqKE”, “un” : “1”, “username” : “1”, “user_type” : “password”, “name” : “Hrithik Roshan”, “prefix” : “”, “first_name” : “Hrithik”, “middle_name” : “”, “last_name” : “Roshan”, “email” : “1@mailinator.com”, “link” : “https:\/\/app.linkwok.com\/user\/1”, “gender” : null, “service_id” : null, “created_at” : ISODate(“2017-01-20T05:50:52.561Z”), “display_pic” : “\/images\/default_user.png”, “projects_count” : 0, “location” : { “country” : null }, “country” : null, “bio” : “”, “twitter_handle” : “”, “website” : “”, “facebook” : “”, “evernote_token” : null, “drive_token” : null, “dropbox_token” : null, “facebook_token” : null, “evernote_intermediate” : {  }, “evernote_shard_id” : null, “subscribed” : true, “mailchimp_id” : null }<\/p>\n\n\n\n

{ “_id” : “2bGLq3WxgPomM8NdS”, “un” : “2”, “username” : “2”, “user_type” : “password”, “name” : “Shah Rukh Khan”, “prefix” : “”, “first_name” : “Shah”, “middle_name” : “”, “last_name” : “Rukh”, “email” : “2@mailinator.com”, “link” : “https:\/\/app.linkwok.com\/user\/2”, “gender” : null, “service_id” : null, “created_at” : ISODate(“2017-01-20T08:40:39.171Z”), “display_pic” : “\/images\/default_user.png”, “projects_count” : 0, “location” : { “country” : null }, “country” : null, “bio” : “”, “twitter_handle” : “”, “website” : “”, “facebook” : “”, “evernote_token” : null, “drive_token” : null, “dropbox_token” : null, “facebook_token” : null, “evernote_intermediate” : {  }, “evernote_shard_id” : null, “subscribed” : true, “mailchimp_id” : null }<\/p>\n","protected":false},"excerpt":{"rendered":"

DigitalOcean is a US-based cloud computing company headquartered in NY.  As of 2015, it was the second largest hosting company in the world in terms of web-facing computers.   It appears that one or more of its databases have been hacked and confidential information leaked.  We have informed the company of the suspected breach. The […]<\/p>\n","protected":false},"author":1,"featured_media":1146,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[21],"tags":[],"class_list":["post-1141","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-labs"],"_links":{"self":[{"href":"https:\/\/lmntrix.com\/blog\/wp-json\/wp\/v2\/posts\/1141","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/lmntrix.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/lmntrix.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/lmntrix.com\/blog\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/lmntrix.com\/blog\/wp-json\/wp\/v2\/comments?post=1141"}],"version-history":[{"count":4,"href":"https:\/\/lmntrix.com\/blog\/wp-json\/wp\/v2\/posts\/1141\/revisions"}],"predecessor-version":[{"id":4450,"href":"https:\/\/lmntrix.com\/blog\/wp-json\/wp\/v2\/posts\/1141\/revisions\/4450"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/lmntrix.com\/blog\/wp-json\/wp\/v2\/media\/1146"}],"wp:attachment":[{"href":"https:\/\/lmntrix.com\/blog\/wp-json\/wp\/v2\/media?parent=1141"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/lmntrix.com\/blog\/wp-json\/wp\/v2\/categories?post=1141"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/lmntrix.com\/blog\/wp-json\/wp\/v2\/tags?post=1141"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}