Data from 550,000 members of the Nulled cracking community is on the street

Last week, Nulled’s database of user information was found to have been hacked, leaving the data of nearly 550,000 users online. Nulled is a community where members can share cracks.

The Nulled website, normally accessible via Nulled.io or Nulled.to, among others, is unreachable. The database that has been stolen is distributed via various hacking forums, including siph0n. It is a compressed file of 1.3 GB and once unpacked, the sql file takes up 9.45 GB.

The file contains user information such as email addresses and IP addresses, as well as hundreds of thousands of users’ private messages, according to Troy Hunt’s “Have i been pwned.” In addition, it would be md5 hashes of passwords that have been salted.

The hack is claimed by a Romanian group called Smurfs.gg. It turns out that he defaced the website on 24 April and, among other things, placed the text ‘All your data belongs to Romania’. Posts on Nulled from that day show that users believed that only the Shoutbox was affected and the database was safe.