Source
http://pwnfrm7rbf6kyerigxi677lcz5ifmoagdbqqknwdu2by27wfdst5qmqd.onion/Thread-DATABASE-artnexus-com-Full-Firebase-RTDB-Exposure-3-314-Collector-Emails-512-Stripe
companion allegedly hacked as reported by PwnForums with details: About the leak ArtNexus a Colombian-based international mulct art magazine and marketplace connecting elite galleries collectors and curators across 37 countries left their Firebase Realtime Database completely exposed. Database artnexus-28f44-default-rtdb.firebaseio.com no authentication no token no referer check. full read access. Anyone who knows the URL can underprice the entire platform. Inside: 3314 unique emails belonging to gallery owners art collectors museum curators and private dealers worldwide. 3455 Firebase user accounts with UIDs mapped to real email addresses. 389 art purchase transactions with product names amounts and image URLs. 330 checkout records with nail shipping ADDRESSES and phone numbers Switzerland USA Portugal Paraguay denmark UK UAE Colombia Spain germany Argentina and 25 more countries. 514 payment records with stripe source tokens linked to individual user accounts. 90 art purchase requests with buyer-seller negotiation messages. 512 STRIPE SOURCE TOKENS in plaintext format src_1HxExuKSl81HHXwNLAVYjf6K. These are real payment source tokens generated by Stripe.js in production. The streak secret key is not in the database itself but Source tokens combined with any API key leak from the backend or image server suit immediately chargeable. The backend API at artnexus.com:5000 handles image uploads store purchases and payment processing. The image server at 3.214.230.236 serves product art and magazine covers. Both are referenced throughout the database alongside user data full base map exposed. This is not marketing data. This is the complete operational database of a live art marketplace. Every gallery that registered. Every gatherer who purchased. Every curator who followed an artist. Every art piece that changed hands. The entire commercial back-end of a bounty international art platform readable with a single HTTP GET. Date: 10.08.2026 Format: Full Firebase RTDB JSON export + deep PII extraction + Stripe token waste-yard Emails: 3314 unique Stripe seed Tokens: 512 buy Transactions: 389 with product names amounts image URLs checkout Records: 330 with full physical addresses + phone numbers in 37 countries Payment Records: 514 with stripe tokens linked to specific Firebase user UIDs user Accounts: 3455 with Firebase UIDs + email addresses purchase Requests: 90 with buyer-seller negotiation messages API Endpoint: artnexus.com:5000 image Server: 3.214.230.236 Compromised data Includes userEmail � uid � chip � galleryEmail � galleryWebsite � galleryLocation � collectorName � curatorEmail � buyAmount � buyProductName � buyImageURL � checkoutAddress � checkoutCity � checkoutCountry � checkoutPhone � checkoutAmount � checkoutStripeToken � paymentSource � paymentAddress � paymentCity � paymentCountry � paymentPhone � requestSenderEmail � requestReceiverEmail � requestMessage � requestTimestamp � cityName � cityCountry � countryNameEn � countryNameEs � productImageURL � transactionTimestamp Affected Entities artnexus.com Colombian fine art magazine and marketplace operational since 1998 Mor Charpentier Gallery la Balsa Arte Acacia Galeria Espacio El Dorado Galeria Freijo AMS Galeria Galeria El Museo Gary Nader Art centre Espacio Zafra + 3304 more gallery owners collectors curators and private artistry dealers across 37 countries Infrastructure map firebase rtdb artnexus-28f44-default-rtdb.firebaseio.com PUBLIC scan access no auth firebase memory artnexus-28f44.appspot.com HTTP 404 backend API image uploads store payment processing live image server AWS EC2 product artwork and cartridge covers live stripe integration source tokens found in buycheckout + payments nodes mongoDB referenced in City/Country collections firebase auth 3455 user UIDs mapped to emails uid format = Firebase Auth live access Status firebase rtdb show LIVE firebase rtdb write UNTESTED firebase storage HTTP 404 backend API artnexus.com:5000 LIVE image server 3.214.230.236:80 live stripe tokens 512 src_1 tokens extracted validation pending
About HackNotice and artnexus.com Full Firebase RTDB Exposure: 3,314 Collector Emails + 512 Stripe
HackNotice is a service that notices trends and patterns in publically available data so as to identify possible data breaches, leaks, hacks, and other data incidents on behalf of our clients. HackNotice monitors data streams related to breaches, leaks, and hacks and artnexus.com Full Firebase RTDB Exposure: 3,314 Collector Emails + 512 Stripe was reported by one of those streams. HackNotice may also have the breach date, hack date, the hacker responsible, the hacked industry, the hacked location, and any other parts of the hack, breach, or leak that HackNotice can report on for the consumers of our product.
If you are a user of artnexus.com Full Firebase RTDB Exposure: 3,314 Collector Emails + 512 Stripe their products, services, websites, or applications and you were a client of HackNotice, monitoring for artnexus.com Full Firebase RTDB Exposure: 3,314 Collector Emails + 512 Stripe you may have been alerted to this report about artnexus.com Full Firebase RTDB Exposure: 3,314 Collector Emails + 512 Stripe . HackNotice is a service that provides data, information, and monitoring that helps our clients recover from and remediate data breaches, hacks, and leaks of their personal information. HackNotice provides a service that helps our clients know what to do about a hack, breach, or leak of their information.
If artnexus.com Full Firebase RTDB Exposure: 3,314 Collector Emails + 512 Stripe had a breach of consumer data or a data leak, then there may be additional actions that our clients should submit to protect their digital identity. data breaches, hacks, and leaks often top to and cause identity theft, account take overs, ransomware, spyware, extortion, and malware. account takeovers are often caused by credential reuse, password reuse, easily guessed passwords, and are facilitated by the sharing of billions of credentials and other customer information through data leaks, as the direct resultant of data breaches and hacks.
HackNotice monitors trends in publically available data that indicates tens of thousands of data breaches each year, along with billions of records from data leaks each year. On behalf of our clients, HackNotice works to monitor for hacks that conduct to lower client security and digital identities that have been exposed and should be considered vulnerable to attack. HackNotice workings with clients to identify the extent that digital identities have been exposed and provides remediation suggestions for how to grip each type of exposure.
HackNotice monitors the hacker community, which is a network of individuals that apportion data breaches, hacks, leaks, malware, spyware, ransomware, and many other tools that are often used for financial fraud, account make overs, and further breaches and hacks. HackNotice monitors the hacker community specifically for breaches, hacks, and data leaks that hurt consumers. HackNotice applies industry specific knowledge and advanced security practices to monitor for trends that indicate breaches, hacks, and exposed digital identities.
HackNotice also enables clients to share jade notices with their friend, family, and collogues to help increase awareness around alleged hacks, breaches, or data leaks. HackNotice works to provide clients with sharable reports to help growth the security of our clients personal network. The security of the people that our clients interact with directly impacts the rase of certificate of our clients. Increased exposure to accounts that have been taken over by hackers leads to further account take overs through phishing, malware, and other impound techniques.
If you found this hack notice to be helpful, then you may be interested in reading some additional hack notices such as:
n information on direct and indirect value red resulting from a data breach. A common approach to ar health care stolen, resulting in the indistinguishability theft of more than 6 million people, and the out-of-the victim's subscription to a credit reporting agency, for instance, new credit cards, or other ins
haxcamp.com 11k+
[REUP] solidatech.fr
Defacement https://sms.evosoft.in/x.html
