Posts: 241 Threads: 0 Joined: N/A    March 17, 2022 at 12:19 AM Hello BreachForums Community, Today I have uploaded the WeLeakInfo Database for you to download, thanks for reading and enjoy! In March 2021, the Stripe account of the now-defunct WeLeakInfo service was taken over by @ pompompurin after acquiring an expired domain name with an email address used to manage the account. Access to Stripe then exposed almost 12k unique email addresses from customers who'd made credit card payments in order to obtain breached data hosted by WeLeakInfo. The data was subsequently leaked publicly and also included names, payment histories, IP addresses, billing addresses, partial credit card data and the organisation making the purchase. Compromised data: Browser user agent details, Email addresses, Employers, IP addresses, Names, Partial credit card data, Physical addresses, Purchases ContentsSpoiler The .7z File's MD5 Hash is BC003ABAED268E2877E1204FC20779C3. In total, there are 11788 records. The file is 939.14MB uncompressed and 34.29MB compressed. Posts: 66 Threads: 0 Joined: N/A March 18, 2022 at 2:31 PM I'm wondering, how did Pom originally get the idea of registering under WLI's domain and recovering the Stripe account? Posts: 0 Threads: 0 Joined: N/A March 18, 2022 at 2:33 PM (March 18, 2022, 02:31 PM)Halcyonic Wrote: I'm wondering, how did Pom originally get the idea of registering under WLI's domain and recovering the Stripe account? I mean, he literally just saw that the domain expired and then decided to register it to see if he could potentially pull any information. It's not that complicated, really. Posts: 66 Threads: 0 Joined: N/A March 18, 2022 at 2:39 PM (March 18, 2022, 02:33 PM)KILLKIKES Wrote: (March 18, 2022, 02:31 PM)Halcyonic Wrote: I'm wondering, how did Pom originally get the idea of registering under WLI's domain and recovering the Stripe account?
I mean, he literally just saw that the domain expired and then decided to register it to see if he could potentially pull any information. It's not that complicated, really. I know, but it's still something too specific to think of randomly. Smart though, I guess its blind luck. Also with the account information and/or API key access, you could basically issue refunds to everyone in a single click; charging whichever bank or withdrawal method which was linked. If I recall, Antichrist and Logical Operator ran WLI right? 0Posts: 3270 Threads: 0 Joined: N/A   March 18, 2022 at 11:04 PM (March 18, 2022, 02:39 PM)Halcyonic Wrote: (March 18, 2022, 02:33 PM)KILLKIKES Wrote: (March 18, 2022, 02:31 PM)Halcyonic Wrote: I'm wondering, how did Pom originally get the idea of registering under WLI's domain and recovering the Stripe account?
I mean, he literally just saw that the domain expired and then decided to register it to see if he could potentially pull any information. It's not that complicated, really.
I know, but it's still something too specific to think of randomly. Smart though, I guess its blind luck.
Also with the account information and/or API key access, you could basically issue refunds to everyone in a single click; charging whichever bank or withdrawal method which was linked.
If I recall, Antichrist and Logical Operator ran WLI right?
0 Lol I did try to issue everyone refunds. However it didn't go through since the person had no money on the account. Found a screenshot from March 2021 when I did it, you can see the balance -17k and the message at the top showing they suspended the account after I tried:  Also found this, looks like NordVPN didn't save them from being caught :(  Posts: 17 Threads: 0 Joined: N/A March 19, 2022 at 12:39 AM 888888888 Posts: 354 Threads: 0 Joined: N/A  March 19, 2022 at 12:44 AM Thanks. I was looking for this. Posts: 66 Threads: 0 Joined: N/A March 19, 2022 at 1:24 AM (March 18, 2022, 11:04 PM)pompompurin Wrote: (March 18, 2022, 02:39 PM)Halcyonic Wrote: (March 18, 2022, 02:33 PM)KILLKIKES Wrote: (March 18, 2022, 02:31 PM)Halcyonic Wrote: I'm wondering, how did Pom originally get the idea of registering under WLI's domain and recovering the Stripe account?
I mean, he literally just saw that the domain expired and then decided to register it to see if he could potentially pull any information. It's not that complicated, really.
I know, but it's still something too specific to think of randomly. Smart though, I guess its blind luck.
Also with the account information and/or API key access, you could basically issue refunds to everyone in a single click; charging whichever bank or withdrawal method which was linked.
If I recall, Antichrist and Logical Operator ran WLI right?
0
Lol I did try to issue everyone refunds. However it didn't go through since the person had no money on the account. Found a screenshot from March 2021 when I did it, you can see the balance -17k and the message at the top showing they suspended the account after I tried:
Also found this, looks like NordVPN didn't save them from being caught :( Kek, ultrasecure "no-logs" NordVPN for the win :angel: Posts: 241 Threads: 0 Joined: N/A March 20, 2022 at 2:02 AM (March 18, 2022, 11:04 PM)pompompurin Wrote: (March 18, 2022, 02:39 PM)Halcyonic Wrote: (March 18, 2022, 02:33 PM)KILLKIKES Wrote: (March 18, 2022, 02:31 PM)Halcyonic Wrote: I'm wondering, how did Pom originally get the idea of registering under WLI's domain and recovering the Stripe account?
I mean, he literally just saw that the domain expired and then decided to register it to see if he could potentially pull any information. It's not that complicated, really.
I know, but it's still something too specific to think of randomly. Smart though, I guess its blind luck.
Also with the account information and/or API key access, you could basically issue refunds to everyone in a single click; charging whichever bank or withdrawal method which was linked.
If I recall, Antichrist and Logical Operator ran WLI right?
0
Lol I did try to issue everyone refunds. However it didn't go through since the person had no money on the account. Found a screenshot from March 2021 when I did it, you can see the balance -17k and the message at the top showing they suspended the account after I tried:
Also found this, looks like NordVPN didn't save them from being caught :( How much did they make in total? Only £17,000? March 20, 2022 at 2:08 AM (March 18, 2022, 11:04 PM)pompompurin Wrote: (March 18, 2022, 02:39 PM)Halcyonic Wrote: (March 18, 2022, 02:33 PM)KILLKIKES Wrote: (March 18, 2022, 02:31 PM)Halcyonic Wrote: I'm wondering, how did Pom originally get the idea of registering under WLI's domain and recovering the Stripe account?
I mean, he literally just saw that the domain expired and then decided to register it to see if he could potentially pull any information. It's not that complicated, really.
I know, but it's still something too specific to think of randomly. Smart though, I guess its blind luck.
Also with the account information and/or API key access, you could basically issue refunds to everyone in a single click; charging whichever bank or withdrawal method which was linked.
If I recall, Antichrist and Logical Operator ran WLI right?
0
Lol I did try to issue everyone refunds. However it didn't go through since the person had no money on the account. Found a screenshot from March 2021 when I did it, you can see the balance -17k and the message at the top showing they suspended the account after I tried:
Also found this, looks like NordVPN didn't save them from being caught :( Embarrassing, honestly.
#databreach
#RIU
|
