In approximately July 2020, the US-based online alcohol delivery service Drizly suffered a data breach. The data was sold online before being extensively redistributed and contained 2.5 million unique email addresses alongside names, physical and IP addresses, phone numbers, dates of birth and passwords stored as bcrypt hashes.
Breach date: 2 July 2020
Compromised accounts: 2,479,044
Compromised data: Dates of birth, Device information, Email addresses, IP addresses, Names, Passwords, Phone numbers, Physical addresses
Code:
CREATE TABLE `users` (
`id` int(11) NOT NULL AUTO_INCREMENT,
`partner_id` int(11) NOT NULL DEFAULT '1',
`email` char(75) CHARACTER SET utf8 DEFAULT NULL,
`status` int(11) DEFAULT '1',
`first_name` varchar(255) DEFAULT NULL,
`last_name` varchar(255) DEFAULT NULL,
`legacy_password` varchar(255) DEFAULT NULL,
`password_hash` varchar(255) DEFAULT NULL,
`password_salt` varchar(255) DEFAULT NULL,
`braintree_id` varchar(255) DEFAULT NULL,
`card_status` int(11) DEFAULT NULL,
`billing_name_old` varchar(50) DEFAULT NULL,
`billing_address_old` varchar(50) DEFAULT NULL,
`billing_address2_old` varchar(50) DEFAULT NULL,
`billing_city_old` varchar(20) DEFAULT NULL,
`billing_state_old` varchar(2) DEFAULT NULL,
`billing_zip_old` varchar(5) DEFAULT NULL,
`billing_phone_old` bigint(15) DEFAULT NULL,
`delivery_name_old` varchar(50) DEFAULT NULL,
`delivery_address_old` varchar(50) DEFAULT NULL,
`delivery_address2_old` varchar(50) DEFAULT NULL,
`delivery_city_old` varchar(20) DEFAULT NULL,
`delivery_state_old` varchar(2) DEFAULT NULL,
`delivery_zip_old` varchar(5) DEFAULT NULL,
`delivery_phone_old` bigint(15) DEFAULT NULL,
`flag` varchar(6) DEFAULT NULL,
`birth_year` year(4) DEFAULT NULL,
`latitude_old` double DEFAULT NULL,
`longitude_old` double DEFAULT NULL,
`token_old` varchar(100) DEFAULT NULL,
`birth_date_string` varchar(10) DEFAULT NULL,
`birth_date` date DEFAULT NULL,
`invite_promo_code_id` int(11) DEFAULT NULL,
`invite_reward_promo_code_id` int(11) DEFAULT NULL,
`referred_by_user_id` int(11) DEFAULT NULL,
`registerDate` timestamp NOT NULL DEFAULT CURRENT_TIMESTAMP,
`logs` text,
`redacted_cc_old` int(4) DEFAULT NULL,
`device` varchar(255) DEFAULT NULL,
`version` varchar(255) DEFAULT NULL,
`user_agent` varchar(255) DEFAULT NULL,
`register_version` varchar(255) DEFAULT NULL,
`last_sign_in_at` datetime DEFAULT NULL,
`button_access_token` varchar(255) DEFAULT NULL,
`store_group_id` int(11) DEFAULT NULL,
`is_covered` tinyint(1) DEFAULT '0',
`tax_exempt` tinyint(1) DEFAULT '0',
`sift_score` int(11) DEFAULT NULL,
`ip_address` varchar(255) DEFAULT NULL,
`covered_at` datetime DEFAULT NULL,
`origin_country_id` int(11) DEFAULT NULL,
`marketing_optin` tinyint(1) DEFAULT NULL,
`delivery_fee_override` decimal(4,2) DEFAULT NULL,
`substitution_preference` int(11) DEFAULT '1',
`is_corporate` tinyint(1) DEFAULT '0',
`is_covered_by_shipping` tinyint(1) DEFAULT '0',
`is_covered_by_delivery` tinyint(1) DEFAULT '0',
`partner_token_id` int(11) DEFAULT NULL,
`phone` varchar(255) DEFAULT NULL,
PRIMARY KEY (`id`),
UNIQUE KEY `partner_id_email_uniq` (`partner_id`,`email`),
KEY `index_users_on_store_group_id` (`store_group_id`),
KEY `index_users_on_email` (`email`),
KEY `index_users_on_referred_by_user_id` (`referred_by_user_id`),
KEY `index_users_on_invite_promo_code_id` (`invite_promo_code_id`)
) ENGINE=InnoDB AUTO_INCREMENT=5752512 DEFAULT CHARSET=latin1;
/*!40101 SET character_set_client = @saved_cs_client */;
--
-- Dumping data for table `users`
--
LOCK TABLES `users` WRITE;
/*!40000 ALTER TABLE `users` DISABLE KEYS */;
INSERT INTO `users` VALUES (1,1,'DONTDELETE1@drizly.com',1,'Acme','Liquor','abadidea',NULL,NULL,'123123',1,'Gordons Liquor','5555 North Ave',NULL,'Los Angeles','CA','02114',2147483647,'Acme Liquor','5555 North Ave',NULL,'Los Angeles','CA','02114',2147483647,'2',0000,34.019633,-118.287838,'23413adsfasd234asdf23asdvz',NULL,'1900-01-01',689826,689825,NULL,'1990-01-01 00:00:00',NULL,NULL,'Web',NULL,'Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/73.0.3683.103 Safari/537.36',NULL,'2019-04-18 17:55:14',NULL,4,1,0,0,'192.150.73.230','2017-07-10 09:40:27',1,NULL,NULL,1,0,1,1,NULL,NULL)