Nvidia database that's listed on HIBP?
by - Thursday, January 1, 1970 at 12:00 AM
Can't seem to find wtf file Troy loaded into HIBP

In February 2022, microchip company NVIDIA suffered a data breach that exposed employee credentials and proprietary code. Impacted data included over 70k employee email addresses and NTLM password hashes, many of which were subsequently cracked and circulated within the hacking community.
Breach date: 23 February 2022
Date added to HIBP: 2 March 2022
Compromised accounts: 71,335
Compromised data: Email addresses, Passwords

Could someone share it please in a new thread in the Databases section so it can be moved to official? Thanks !

https://pompur.in
Reply
I saw this on XSS but I don't have enough likes to download.
Reply
Have reviewed this DB several times. but didn't find the emails anywhere.
the only thing i found useful were usernames and hashed passwords but repeat myself there were no emails anywhere.
Asked a question to some people and no one knows the answer, have no idea where HIBP got the emails for this breach
Reply
(June 25, 2022, 08:11 AM)pompompurin Wrote: Can't seem to find wtf file Troy loaded into HIBP


In February 2022, microchip company NVIDIA suffered a data breach that exposed employee credentials and proprietary code. Impacted data included over 70k employee email addresses and NTLM password hashes, many of which were subsequently cracked and circulated within the hacking community.
Breach date: 23 February 2022
Date added to HIBP: 2 March 2022
Compromised accounts: 71,335
Compromised data: Email addresses, Passwords


Could someone share it please in a new thread in the Databases section so it can be moved to official? Thanks !


Do you mean this base? https://pixeldrain.com/u/FwDuZPWE
UPD: sorry I made a mistake this is the cracked version
Reply
(June 25, 2022, 10:06 AM)cy0dagga77 Wrote: Have reviewed this DB several times. but didn't find the emails anywhere.
the only thing i found useful were usernames and hashed passwords but repeat myself there were no emails anywhere.
Asked a question to some people and no one knows the answer, have no idea where HIBP got the emails for this breach


Yes, I also saw username:hash, not email
Reply
(June 25, 2022, 10:06 AM)cy0dagga77 Wrote: Have reviewed this DB several times. but didn't find the emails anywhere.
the only thing i found useful were usernames and hashed passwords but repeat myself there were no emails anywhere.
Asked a question to some people and no one knows the answer, have no idea where HIBP got the emails for this breach

Yes, HIBP sometimes makes mistakes, for example, in the universarium database they indicated that there are passwords there, although in fact they were not there
Reply
(June 25, 2022, 10:06 AM)cy0dagga77 Wrote: Have reviewed this DB several times. but didn't find the emails anywhere.
the only thing i found useful were usernames and hashed passwords but repeat myself there were no emails anywhere.
Asked a question to some people and no one knows the answer, have no idea where HIBP got the emails for this breach


I agree, I can't figure out what troy loaded in. I also looked at the leaks and didn't see any email addresses.

https://pompur.in
Reply
(June 25, 2022, 12:23 PM)pompompurin Wrote:
(June 25, 2022, 10:06 AM)cy0dagga77 Wrote: Have reviewed this DB several times. but didn't find the emails anywhere.
the only thing i found useful were usernames and hashed passwords but repeat myself there were no emails anywhere.
Asked a question to some people and no one knows the answer, have no idea where HIBP got the emails for this breach


I agree, I can't figure out what troy loaded in. I also looked at the leaks and didn't see any email addresses.


Troy has concatenated @nvidia.com to the end of all of the usernames, example from the dehash

Faces In Disguise

Reply
turns out because they are emails, I guess the accounts doubled up as an email as well as login for their system.

Faces In Disguise

Reply
(August 10, 2022, 11:09 AM)emo Wrote: Troy has concatenated @nvidia.com to the end of all of the usernames, example from the dehash


Possibly, but it's still not clear to me where he got > 70k unique email addresses from?
In that public shit that one of the arrested members of the LAPSUS group posted on his Telegram channel, there were only 7k unique email addresses
Reply


 Users viewing this thread: Nvidia database that's listed on HIBP?: No users currently viewing.