EchoVPS, a European cloud VPS server provider, has allegedly been compromised, with an unauthorized party currently selling its internal data on a cybercrime forum. The actor claims to have shut down the provider’s website and issued a ransom demand, threatening to release all stolen data publicly if payment is not received before a countdown expires. The threat actor is offering the dataset to interested buyers for $150 while the ransom timer is active.
According to the actor, the allegedly compromised database contains 85,000 lines of data. The exposed information includes:
-
Company source code
-
Internal administrative email addresses
-
First and last names
-
Customer email addresses
-
Hashed passwords
-
IP addresses
-
Login timestamps and session tokens
