Cybersecurity incident
Date: 2023-12-30 00:00:00
Affected organization: SnappFood
Affected country: Iran (Islamic Republic of)
Industry: Accommodation and Food Services
Event type: Mixed
Event subtype: Exploitation of Application Server
Motive: Financial
Actor: Irleaks
Actor type: Criminal
Actor country: Undetermined
Description: Irleaks claims to have broken into the systems of SnappFood, Iran's leading online food ordering service, and to have exfiltrated 3TB of highly sensitive data from 20 million user profiles (emails, passwords, phone numbers), 51 million users' addresses and 600,000 credit card records viat the StealC Infostealer