[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f2mdi8undnyylw":3,"$f3v62dt0ahwpp1":60},{"success":4,"breach":5},true,{"_id":6,"name":7,"title":8,"slug":9,"domain":10,"breachDate":11,"addedDate":12,"publishedAt":13,"modifiedDate":13,"contentUpdatedAt":13,"source":14,"sourceUrl":15,"sourceUrls":16,"pwnCount":18,"affectedCount":18,"affectedCountStatus":19,"affectedCountLowerBound":20,"affectedCountUnit":21,"hasEnglishDescription":4,"contentLocale":22,"availableLocales":23,"translations":33,"severity":44,"dataClasses":45,"description":51,"seoTitle":52,"seoDescription":53,"logoUrl":54,"isVerified":4,"isSensitive":55,"isSpamList":55,"isMalware":55,"company":56},"6aac8a359a97bc54c1fd0678","Trackitt 2022","Trackitt 2022年数据泄露事件","trackitt-2022","trackitt.com","2022-07-08T00:00:00.000Z","2026-09-18T00:47:49.007Z","2026-10-10T08:25:43.442Z","Trackitt database dump & breach intelligence","https:\u002F\u002Fsynscan.net\u002F",[15,17],"https:\u002F\u002Fleakcheck.io\u002F",428360,"known",null,"unknown","zh",[24,25,22,26,27,28,29,30,31,32],"en","tr","hi","es","ar","fr","bn","pt","ru",{"en":34,"tr":35,"zh":36,"hi":37,"es":38,"ar":39,"fr":40,"bn":41,"pt":42,"ru":43},{"slug":9},{"slug":9},{"slug":9},{"slug":9},{"slug":9},{"slug":9},{"slug":9},{"slug":9},{"slug":9},{"slug":9},"High",[46,47,48,49,50],"Usernames","Email addresses","Passwords","IP addresses","Website activity","\u003Cp>\u003Cstrong>2022年 Trackitt 数据泄露事件\u003C\u002Fstrong>发生于2022年7月。当时，未经授权的人员访问了 \u003Cstrong>Trackitt\u003C\u002Fstrong>（\u003Ccode>trackitt.com\u003C\u002Fcode>）的数据库基础设施。Trackitt 是全球领先的社区平台，供申请人跟踪美国签证、绿卡和移民申请的进度。此次事件导致用户数据库被未经授权地导出，导出的数据随后在网络安全和数据泄露论坛上传播。\u003C\u002Fp>\u003Ch2>Trackitt 事件影响了哪些信息？\u003C\u002Fh2>\u003Cp>遭泄露的 SQL 数据集涵盖截至2022年7月8日的用户注册和活动记录，暴露了 \u003Cstrong>428,360 个独立用户账户\u003C\u002Fstrong>。泄露的数据类别包括：\u003C\u002Fp>\u003Cul>\u003Cli>\u003Cstrong>账户凭据：\u003C\u002Fstrong>用户名、电子邮件地址和唯一用户 ID。\u003C\u002Fli>\u003Cli>\u003Cstrong>身份验证数据：\u003C\u002Fstrong>加盐 SHA1 密码哈希值和会话密钥。\u003C\u002Fli>\u003Cli>\u003Cstrong>网络元数据：\u003C\u002Fstrong>注册和最后一次登录时的 IP 地址、来源 URL。\u003C\u002Fli>\u003Cli>\u003Cstrong>账户活动：\u003C\u002Fstrong>账户创建日期和最后访问时间戳。\u003C\u002Fli>\u003C\u002Ful>\u003Ch2>有多少用户受到影响？\u003C\u002Fh2>\u003Cp>经核验的用户表备份包含 \u003Cstrong>428,360 个规范化后的唯一电子邮件地址\u003C\u002Fstrong>。独立安全情报平台也印证了此次事件涉及 ~428,000 个账户的规模。\u003C\u002Fp>\u003Ch2>技术分析与安全影响\u003C\u002Fh2>\u003Cp>泄露数据的结构表明，这些数据是从平台的 Symfony\u002FsfGuard 用户管理系统中未经授权导出的。虽然密码使用加盐 SHA1 哈希加密，而非以明文存储，但对于较弱的密码，旧式 SHA1 仍容易受到 GPU 加速字典攻击。此外，由于 Trackitt 用户会经常处理签证和居留申请材料，他们面临的定向鱼叉式网络钓鱼风险更高，攻击者可能冒充移民律师或政府领事机构。\u003C\u002Fp>\u003Ch2>受影响的用户应采取哪些措施？\u003C\u002Fh2>\u003Cp>在2022年7月之前持有 Trackitt 账户的用户应：\u003C\u002Fp>\u003Cul>\u003Cli>立即更改所有可能重复使用了相同凭据的服务上的密码。\u003C\u002Fli>\u003Cli>对不请自来、声称与签证状态或移民申请有关的信息保持高度警惕。\u003C\u002Fli>\u003Cli>为所有个人和工作电子邮件账户启用多因素身份验证（MFA \u002F 2FA）。\u003C\u002Fli>\u003C\u002Ful>","Trackitt 2022年数据泄露事件 (428.4 千 已报告记录数)","Trackitt 2022年数据泄露事件. 据报告，涉及428.4 千条记录。 已报告的数据：用户名, 电子邮箱地址, 密码。 了解影响范围、风险及防护措施。","\u002Fuploads\u002Flogo\u002Ftrackitt_com.webp",false,{"name":57,"sector":58,"country":59,"website":59,"websiteArchiveUrl":59,"websiteStatus":59,"websiteCheckedAt":20},"Trackitt","Online Community","",{"success":4,"breaches":61},[62,69,76,83],{"slug":63,"title":64,"companyName":65,"logoUrl":66,"breachDate":67,"affectedCount":68,"affectedCountStatus":19},"cyberphoenix-community-2024","CyberPhoenix 2024 年数据泄露事件","CyberPhoenix Community Veri İhlali (2024)","\u002Fuploads\u002Flogo\u002Fcyberphoenix-community-2024.webp","2024-09-19T00:00:00.000Z",419000,{"slug":70,"title":71,"companyName":72,"logoUrl":73,"breachDate":74,"affectedCount":75,"affectedCountStatus":19},"hackernewbie-2022","HackerNewbie 2022 年数据泄露事件","HackerNewbie","\u002Fuploads\u002Flogo\u002Fhacker_newbie_org.webp","2022-09-10T00:00:00.000Z",28326,{"slug":77,"title":78,"companyName":79,"logoUrl":80,"breachDate":81,"affectedCount":82,"affectedCountStatus":19},"thctalk-2022","THCtalk 数据泄露","THCtalk","\u002Fuploads\u002Flogo\u002Fthctalk.webp","2022-08-19T00:00:00.000Z",82013,{"slug":84,"title":85,"companyName":86,"logoUrl":87,"breachDate":88,"affectedCount":89,"affectedCountStatus":19},"animeforum-2017","AnimeForum.ru 数据泄露","AnimeForum.ru","\u002Fuploads\u002Flogo\u002Fanimeforum.webp","2017-12-08T00:00:00.000Z",132515]