1.4 million Pixlr user records have been leaked online to a hacker forum. The user records contain information that can be used by malicious actors to carry out credential stuffing and targeted phishing attacks. The hacker known as ShinyHunters shared the user record database for free to the hacker forum, claiming that the data was stolen from 123rf, whos parent company Inmagine also owns Pixlr. In their post ShinyHunters said that they stole the database from the company’s AWS bucket.
