A database with 3.8B phone numbers from Clubhouse is up for sale

I am selling a database with ten billion phone numbers. 1.25 GB file with each number compressed to a single bit. You can compare the clubhouse database against mine to determine which numbers are not in their set.

The 3.8B numbers is really meaningless, in isolation. This is the problem of plenty - 10K numbers with a very specific profile might be a lot more valuable. The real worry would be the info on the relationships between the numbers (which number is connected to whom). This leak seems to have a count of relations rather than the actual connections.

<a href="https:&#x2F;&#x2F;twitter.com&#x2F;UnderTheBreach&#x2F;status&#x2F;1418889649708208137" rel="nofollow">https:&#x2F;&#x2F;twitter.com&#x2F;UnderTheBreach&#x2F;status&#x2F;141888964970820813...</a><p>this tweet says it&#x27;s BS (they validated the japan sample)

They should combine it with that zero click remote iMessage bug. That’d be some serious black hat marketing synergy.

Enough phone numbers for half the population of the world? Cool story, bro.<p>I refer here to the aspiring salespeople, not the person reporting it. I suspect this list will be available for free on the dark web within a couple of months. Much as I like to collect interesting data this doesn&#x27;t seem useful.

I wonder how feasible a business model it is to collect all the data from all leaks which make their way to the internet, massage the data a little bit, and sell it as a brand new &quot;hack&quot; of some popular service. You can probably do this a few times a year without a problem.

Bilions ?? On clubhouse ?

It&#x27;s fake: <a href="https:&#x2F;&#x2F;twitter.com&#x2F;troyhunt&#x2F;status&#x2F;1419013520763539457" rel="nofollow">https:&#x2F;&#x2F;twitter.com&#x2F;troyhunt&#x2F;status&#x2F;1419013520763539457</a>

How does it work for the seller when the FBI is the one who ends up buying that list and then busted him in the auction?<p>Genuinely asking.. might be dumb question

How realistic would it be to send (anonymous) mass sms messages with phishing or other malicious links to those numbers? I’m occasionally getting sms message with bogus sender info (i cannot reply, nor get contact info), always wonder how spammers pull that off so easily.

Ah I wonder if that&#x27;s related to the bot flood I got recently.

Hey @fabianbeiner how can I get in touch with you?

Is clubhouse still a thing in July 2021? How do you use it? (and who do you talk to?)

It&#x27;s funny how the hacker who is selling stolen private data is also complaining about GDPR compliance and privacy. On the one hand, he&#x27;s right that Clubhouse (if this is true) has done something bad, but the hacker is much worse.

They are done for this time. Leaking peoples&#x27; number who haven&#x27;t even signed up yet because of their economy flame approach for literally anything, oh boy...

If you have enough cash and time you can legally create your own list of all possible numbers on the world. Pick a number, dial and see if it exists. Hang up to prevent further charges.