Electricity provider Tibber: 50,000 data records from leak at Have I Been Pwned
A data leak at electricity provider Tibber came to light in November. Now around 50,000 data records have ended up at Have I Been Pwned.
(Image: Erstellt mit KI in Bing Designer durch heise online / dmk)
The provider of dynamic electricity tariffs and matching gadgets Tibber confirmed a data theft to heise security in November. The Have-I-Been-Pwned project has now added the data records for the 50,002 compromised accounts.
According to the corresponding entry by Have-I-Been-Pwned operator Troy Hunt, he received the data set directly from "a source who requested to be referred to as Threat Actor 888". This name already appeared on the darknet in November, where the data was for sale. The data therefore includes names, email addresses, geographical localization in the form of city and postal code as well as the amount of money spent. The intrusion into Tibber's IT took place on November 10.
Tibber: scope confirmed
Hunt thus confirms the scope of the data: Tibber told heise security in November that, contrary to what was stated in the darknet offer, it was not 243,000 data records that were captured, but 50,000 – still a considerable amount. However, it appears that no further information such as passwords, payment or usage data was actually found. At the Have-I-Been-Pwned project, interested parties can now check whether their email address was also included in the data leak. Criminals can use this information for more authentic phishing or similar fraud attempts.
Videos by heise
In mid-November, Tibber was still investigating the incident and called in the relevant authorities. Tibber was unable to immediately respond to an inquiry from heise online regarding the results of the investigation. We will provide any further information from Tibber here.
In addition to green electricity in dynamic electricity tariffs, Tibber also offers suitable hardware to accurately bill electricity consumption throughout Northern Europe. This includes the "Pulse" electricity tracker, which can evaluate the flashing signals of digital electricity meters in order to record electricity consumption over time. By linking electricity tariffs to exchange prices, households can save money with such tariffs. Household appliances with smart technology are particularly helpful here. A field report on heise online shows that this is indeed the case.
(dmk)
