Freedom Hosting II

Jan 31, 2017

Domain:

fhostingesps6bly.onion

Breach Count:

380,830

Region:

Global

News Report:

HIBP Link

Link

Leak from:

File Size:

240.48 MB

Uncompressed File Size:

2.37 GB

File Count:

2

In January 2017, the free hidden service host Freedom Hosting II suffered a data breach. The attack allegedly took down 20% of dark web sites running behind Tor hidden services with the attacker claiming that of the 10,613 impacted sites, more than 50% of the content was child pornography. The hack led to the exposure of MySQL databases for the sites which included a vast amount of information on the hidden services Freedom Hosting II was managing. The impacted data classes far exceeds those listed for the breach and differ between the thousands of impacted sites.

Leaked Information:

Password

User Name

We have loaded this breach into our database.

File List:

dump_full.sql

dump_users.sql

File Content Sample:

CREATE TABLE `users` (
`id` int(10) unsigned NOT NULL AUTO_INCREMENT,
`group_id` int(10) unsigned NOT NULL DEFAULT 3,
`username` varchar(200) NOT NULL DEFAULT '',
`password` varchar(40) NOT NULL DEFAULT '',
`email` varchar(80) NOT NULL DEFAULT '',
`title` varchar(50) DEFAULT NULL,
`realname` varchar(40) DEFAULT NULL,
`url` varchar(100) DEFAULT NULL,
`jabber` varchar(80) DEFAULT NULL,
`icq` varchar(12) DEFAULT NULL,
`msn` varchar(80) DEFAULT NULL,
`aim` varchar(30) DEFAULT NULL,
`yahoo` varchar(30) DEFAULT NULL,
`location` varchar(30) DEFAULT NULL,
`signature` text DEFAULT NULL,
`disp_topics` tinyint(3) unsigned DEFAULT NULL,
`disp_posts` tinyint(3) unsigned DEFAULT NULL,
`email_setting` tinyint(1) NOT NULL DEFAULT 1,
`notify_with_post` tinyint(1) NOT NULL DEFAULT 0,
`notify_pm_full` tinyint(1) NOT NULL DEFAULT 0,
`auto_notify` tinyint(1) NOT NULL DEFAULT 0,
`show_smilies` tinyint(1) NOT NULL DEFAULT 1,
`show_img` tinyint(1) NOT NULL DEFAULT 1,
`show_img_sig` tinyint(1) NOT NULL DEFAULT 1,
`show_avatars` tinyint(1) NOT NULL DEFAULT 1,
`show_sig` tinyint(1) NOT NULL DEFAULT 1,
`timezone` float NOT NULL DEFAULT 0,
`dst` tinyint(1) NOT NULL DEFAULT 0,
`time_format` tinyint(1) NOT NULL DEFAULT 0,
`date_format` tinyint(1) NOT NULL DEFAULT 0,
`language` varchar(25) NOT NULL DEFAULT 'English',
`style` varchar(25) NOT NULL DEFAULT 'Air',
`num_posts` int(10) unsigned NOT NULL DEFAULT 0,
`num_pms` int(10) unsigned NOT NULL DEFAULT 0,
`last_post` int(10) unsigned DEFAULT NULL,
`last_search` int(10) unsigned DEFAULT NULL,
`last_email_sent` int(10) unsigned DEFAULT NULL,
`last_report_sent` int(10) unsigned DEFAULT NULL,
`registered` int(10) unsigned NOT NULL DEFAULT 0,
`registration_ip` varchar(39) NOT NULL DEFAULT '0.0.0.0',
`last_visit` int(10) unsigned NOT NULL DEFAULT 0,
`admin_note` varchar(30) DEFAULT NULL,
`activate_string` varchar(80) DEFAULT NULL,
`activate_key` varchar(8) DEFAULT NULL,
`use_pm` tinyint(1) NOT NULL DEFAULT 1,
`notify_pm` tinyint(1) NOT NULL DEFAULT 1,
PRIMARY KEY (`id`),
UNIQUE KEY `users_username_idx` (`username`(25)),
KEY `users_registered_idx` (`registered`)
) ENGINE=MyISAM AUTO_INCREMENT=266 DEFAULT CHARSET=utf8;
/*!40101 SET character_set_client = @saved_cs_client */;

--
-- Dumping data for table `users`
--

LOCK TABLES `users` WRITE;
/*!40000 ALTER TABLE `users` DISABLE KEYS */;
INSERT INTO `users` VALUES (1,3,'Guest','Guest','Guest',NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,1,0,0,0,1,1,1,1,1,0,0,0,0,'English','Air',0,0,NULL,NULL,NULL,NULL,0,'0.0.0.0',0,NULL,NULL,NULL,1,1),(2,1,'Zorc','48d30d5351edb9224636a006942de72469c774c8','[email protected]',NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,1,0,0,0,1,1,0,1,1,0,0,0,0,'Deutsch','Technetium',85,0,1441031676,NULL,NULL,NULL,1388562569,'192.168.75.1',1473000473,NULL,NULL,NULL,1,1),(3,4,'Killaz','10935470819864e8b315286ddb209c398e60d437','[email protected]',NULL,NULL,NULL,NULL,NULL,'BM-2uDTO31xW2mU6BPoXtrhk65KwSLNNoyAd4',NULL,NULL,NULL,NULL,NULL,NULL,1,0,0,0,1,1,1,1,1,0,0,0,0,'Deutsch','Earth',39,0,1438968118,NULL,NULL,NULL,1388562569,'192.168.75.1',1438968140,NULL,NULL,NULL,1,1),(4,4,'EliteAccounts','62b8c3cb158e58eaa25be451d2cb1a20c81994b3','[email protected]',NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,1,0,0,0,1,1,1,1,1,0,0,0,0,'Deutsch','Earth',0,0,NULL,NULL,NULL,NULL,1388562569,'192.168.75.1',1435050862,NULL,NULL,NULL,1,1),(5,4,'Neo','17a1774303b0101e980efeaff57d2b86a13dacc0','[email protected]',NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,1,0,0,0,1,1,1,1,1,0,0,0,0,'Deutsch','Earth',2,0,1435238076,NULL,NULL,NULL,1388562569,'192.168.75.1',1435238090,NULL,NULL,NULL,1,1),(6,4,'Mitleser','b1cc73a5b192dceedfb220f7a4a2d25b63c0ceed','[email protected]',NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,1,0,0,0,1,1,1,1,1,0,0,0,0,'Deutsch','Earth',3,0,1438968683,NULL,NULL,NULL,1388562569,'192.168.75.1',1438968696,NULL,NULL,NULL,1,1),(7,4,'WeedShop','f52fb86121687e0d91d4770ef6d6b1503f5db17b','[email protected]',NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,1,0,0,0,1,1,1,1,1,0,0,0,0,'Deutsch','Earth',10,0,1439040212,NULL,NULL,NULL,1388562569,'192.168.75.1',1439040215,NULL,NULL,NULL,1,1),(8,4,'BTCWechselstube','281a7dca042cd06e55d49fa1364f890abc8baf90','[email protected]',NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,NULL,1,0,0,0,1,1,1,1,1,0,0,0,0,'Deutsch','Earth',3,0,1435241047,NULL,NULL,NULL,1388562569,'192.168.75.1',1435241051,NULL,NULL,NULL,1,1)