Welcome to the Growery Message Board! You are experiencing a small sample of what the site has to offer. Please login or register to post messages and view our exclusive members-only content. You'll gain access to additional forums, file attachments, board customizations, encrypted private messages, and much more!
|
 Rider420
Stranger
Registered: 06/21/17
Posts: 518
Last seen: 2 months, 19 days
|
 Did this cannabis site expose the records of more than a million users? 
#846894 - 11/10/20 09:24 AM (4 years, 11 days ago) |
|
|
Did this cannabis site expose the records of more than a million users?
An independent cybersecurity consultant alleges that more than 3.4 million user records from GrowDiaries were exposed
Author of the article:Sam Riches
https://www.thegrowthop.com/cannabis-news/did-this-cannabis-site-expose-the-records-of-more-than-a-million-users
The passwords and private information of 1.4 million users in an online cannabis growing and journaling platform may have been exposed.
So alleges Volodymyr “Bob” Diachenko, an independent cybersecurity consultant, who posted a blog about his findings on LinkedIn.
Diachenko says that GrowDiaries, an online community of cannabis growers, exposed more than 3.4 million user records on the web without a password.
Diachenko alleges that he discovered the unprotected database last month and it was secured five days after he alerted the company.
“It consisted of about 1.4 million records with email addresses and IP addresses, plus 2 million records containing user posts and hashed account passwords. The passwords were hashed using MD5, a deprecated algorithm that an attacker could easily crack to access passwords in plain-text,” he writes, adding that many of the users are based in countries where cannabis cultivation remains illegal.
n response to Diachenko, GrowDiaries clarified they are not based in the U.S., that the site has about 30,000 registered users, and that GrowDiaries never acknowledged the incident, but only replied to the alert.
In his blog post, Diachenko writes that he works with a team that scans the web for accessible databases that contain personal information
“Once we discover who the information belongs to, we immediately notify them of the leak so that the data can be secured,” he writes. “We report the data exposure in an article like this one to help inform readers about this particular exposure and raise awareness regarding data leaks in general. Our ultimate goal is to minimize the potential damage caused as a result of the exposure.”
He recommends that users update their passwords and stay vigilant about targeted phishing attacks.
“Watch out for emails and messages from scammers posing as GrowDiaries or a related company,” he writes. “Never click on links or attachments in unsolicited emails and always verify the sender’s identity before responding.”
A report published earlier this year by Experian, a consumer credit reporting company, identified cannabis websites as a prime target for cyberattacks.
“Many burgeoning companies, like cannabis retailers, may not fully invest in protective, cybersecurity measures as core parts of their business models due to competing priorities,” reads the report, titled Data Breach Industry Forecast.“While any retailer is always a target for cybercriminals, cannabis retailers present a bigger target due to the nature of their business.”
In 2018, an individual accessed the shipping information of approximately 4,500 orders from the Ontario Cannabis Store through a Canada Postdelivery tracking tool.
Careful where and what you post online some sites are run by the DEA! No joke!!!
| |
|
|
You cannot start new topics / You cannot reply to topics
HTML is disabled / BBCode is enabled
Moderator: geokills
1,225 topic views. 0 members, 36 guests and 56 web crawlers are browsing this forum.
[ Show Images Only | Sort by Score | Print Topic ] | | |
|
|
|
Threaded
Previous
Index
Next
Edit 
Reply 
