Incident Overview

A threat actor operating under the handle "Solonik" is advertising the sale of an alleged customer database from ET Online (etonline.com), a popular entertainment and celebrity news platform. The dataset is claimed to contain approximately 5 million customer and subscriber records in raw CSV format.

The advertised data is described as containing information from entertainment magazine subscribers and customers, including individuals who have engaged with the platform for travel purchases and related services. The seller has provided raw sample data demonstrating the structure and content types within the database.

According to the threat actor's listing, the compromised data includes a comprehensive range of personal and transactional information:

• Personal Identifiers: First name, middle name, last name
• Contact Information: Email addresses, phone numbers
• Referral Data: Referrer information and price-in details
• Transaction Details: Price-out data, apartment prices, supplier information
• Additional Attributes: Ship information, travel data, and travel ID numbers

The database is being offered for sale at 2440 USD, with the seller noting that "BreachForums v1 was only the beginning. Mirrors live on." The threat actor has made the claim available through messaging platforms for interested buyers.