e.rip Alleged Data Exposure
The 2022 e.rip data breach involves e.rip (e.rip / Triple J LLC), an online bio link generator and link-shortening platform popular among social media creators, gamers, and Discord communities.
Exposed Data Types
8- Email addresses
- Usernames
- Passwords
- IP addresses
- Time zones
- Geographic locations
- Website activity
- Browser user agents
About This Record
On December 4, 2022, an unauthorized threat actor compromised the platform's production MySQL database, subsequently publishing the stolen data on the cybercrime marketplace BreachForums.
What information was affected in the e.rip incident?
The leaked database dump (users.sql) contains 24,489 user account records. Technical inspection confirms the compromise of the following data classes:
- Identity & Profile Metadata: Usernames, display handles, account tiers, and bio link profiles.
- Contact Coordinates: Registered primary user email addresses.
- Authentication Credentials: User passwords cryptographically secured using the bcrypt hashing algorithm (
$2y$10$cost parameter). - Network & Telemetry Data: Registration IP addresses, country origin codes, and browser user-agent strings.
- System Timestamps & Settings: Account creation dates, last activity timestamps, API keys, and billing profile settings.
How many accounts were affected?
Rigorous RFC 5322 canonical verification confirmed 24,473 unique valid email addresses across the compromised user base.
Technical analysis and security risks
The utilization of bcrypt provides resilient mitigation against brute-force password cracking. Nonetheless, the correlation of user email addresses with online aliases, IP coordinates, and linked social profiles exposes victims to sophisticated spear-phishing campaigns, credential stuffing against identical usernames, and cross-platform identity tracking.
Recommended actions for affected individuals
Users who registered with e.rip should:
- Change passwords on any external platforms where the same password or email was shared.
- Activate multi-factor authentication (MFA / 2FA) across associated email and social media profiles.
- Maintain heightened scrutiny regarding unsolicited messages referencing their handle or online presence.
Verification and editorial method
LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.
Report missing or incorrect information
