ICANN has released a statement on its website that the personal data of ICANN users that was leaked in 2014 was for sale on underground hacker forums. The information leak occurred as a result of a carefully masterminded spear phishing attack when several ICANN staff members fell victim to the carefully planned attack. The cyber criminals effectively gained access to user names and hashed passwords for their Centralized Zone Data System (CZDS).
Shortly after the leak, ICANN recommended that all CZDS users change their passwords. The company said its initial evaluation showed that the data being sold was old. However, there is still the possibility that some users still use their old passwords to access this or other resources. ICANN strongly recommended that these users immediately change their passwords. Reports suggest that the data for at least 8,000 users is for sale on underground forums.
