# Hackers Are Selling More Than 85,000 MySQL Databases On a Dark Web Portal 

**URL:** <https://onehack.st/t/hackers-are-selling-more-than-85-000-mysql-databases-on-a-dark-web-portal/166133>\
**Category:** News & Articles\
**Tags:** programming, hacking\
**Created:** [December 13, 2020, 12:30pm UTC](https://onehack.st/t/hackers-are-selling-more-than-85-000-mysql-databases-on-a-dark-web-portal/166133 "2020-12-13T12:30:07Z")\
**Posts on this page:** 1\
**Page:** 1

<div class="post-metadata">

**Author:** ![Prometheus](https://onehack.st/user_avatar/onehack.st/prometheus/32/34950_2.png) [@Prometheus](https://onehack.st/u/Prometheus)\
**Post date:** [December 13, 2020, 12:30pm UTC](https://onehack.st/t/hackers-are-selling-more-than-85-000-mysql-databases-on-a-dark-web-portal/166133/1 "2020-12-13T12:30:07Z")

</div>

![image](https://onehack.st/uploads/default/original/3X/5/8/58e92f0a14c3e3fea5c5ce162b4e983dfc2f8270.jpeg)

An anonymous Slashdot reader writes:

_For the past year, hackers have been breaking into MySQL databases, downloading tables, deleting the originals, and leaving ransom notes behind, telling server owners to contact the attackers to get their data back. If database owners don’t respond and ransom their data back in nine days, the databases are then put up on auction on a dark web portal._

“[More than 85,000 MySQL databases are currently on sale](https://www.zdnet.com/article/hackers-are-selling-more-than-85000-sql-databases-on-a-dark-web-portal/) on a dark web portal for a price of only $550/database,” reports ZDNet:_This suggests that both the DB intrusions and the ransom/auction web pages are automated and that attackers don’t analyze the hacked databases for data that could contain a higher concentration of personal or financial information. Signs of these ransom attacks have been piling up over the course of 2020, with the number of complaints from server owners finding the ransom note inside their databases popping up on [Reddit](https://old.reddit.com/r/aws/comments/esccbr/rds_db_hacked_what_should_i_do/), the [MySQL forums](https://forums.mysql.com/read.php?10,689767,689767), [tech support forums](https://www.howtoforge.com/community/threads/server-hacked-to-recover-your-lost-database-and-avoid-leaking-it-send-us-0-1-bitcoin-btc.81962/), [Medium posts](https://medium.com/@kalana.16/tracing-the-origin-of-a-real-life-mysql-hack-5a2a6f21fe66), and [private blogs](https://ecomloop.com/posts/database-breach-with-bitcoin-ransom-demand/)._