A threat actor claims to be selling the user database of Vexels, a popular graphic-design platform that provides design assets, tools, and licenses to creatives and agencies. The actor alleges the database contains information on over 820,000 users.
According to the threat actor’s post, the compromised data sample includes a wide range of personally identifiable information (PII). The allegedly compromised data includes:
- Full names
- Email addresses
- PayPal email addresses
- Usernames
- Phone numbers
- Location data (city, country, address, zip code)
- Company names
- Payment gateway details
- User plan and subscription status
