[Bindefos]

No longer selling

Japanese service https://pictsquare.net/ - in their words "is an online exhibition sale service".
Date of breach: 2023-08-14
The company is already aware of the leak, there are thousands of Japanese tweets about the event.


Total row count: 801915.
The table contains:
ID
609 thousand users - mail
667 thousand users - password (unsalted MD5, decrypted half of them myself)
Nickname
~650 thousand users - Telephone + telephone code + full telephone number
Up to three URLs that were shown on the account (description + URL)
For 200 thousand users there's delivery information - person's name, post code, delivery address, delivery phone number.
For a thousand users there is Japanese bank information
For some users there's Twitter ID/token/token secret (because they authorized their accounts with pictSQUARE), I also have the app's public/private tokens, although I think that those will become useless very soon.

Sample:

"id","mail","nickname","temp","password","created","tel","tel_code","tel_success","delivary_name","delivary_post","delivary_address1","delivary_address2","delivary_address3","delivary_tel","delivary_method","delivary_tokumei_name","delivary_tokumei_post","delivary_tokumei_address1","delivary_tokumei_address2","delivary_tokumei_address3","delivary_tokumei_tel","suspended","profile","title1","url1","title2","url2","title3","url3","board","full_tel","modified_avater","modified","store_section","store_url","store_name","pictspace_store_code","delivary_tokumei_address4","bank_code","bank_name","bank_store_code","bank_store_name","bank_acc_section","bank_acc_code","bank_acc_name","bank_section","lang","utm_source","utm_medium","utm_campaign","twitter_id","twitter_token","twitter_token_secret","about"
284964,efka.luv-ya@docomo.ne.jp,ムラヒ,0,sggs1339,2021-07-01 21:21:16.000,"09082261374","82697",1,田中彩穂,"899-5541","46",姶良市北山4114,"","090-8226-1374",1,田中彩穂,"899-5541","46",姶良市北山4114,"","090-8226-1374",0,"","","","","","","",1,"819082261374",,2021-07-03 12:01:36.000,0,,,,"",,,,,,,,,ja,,,,,,,
113713,suzuho624@docomo.ne.jp,すく,0,kihozusu,2020-11-22 12:50:30.000,"07041359101","34909",1,菊池珠帆,"313-0025","8",常陸太田市幡町2005-5,"","070-4135-9101",,,,,,,,0,まほやくℒℴνℯ,"","","","","","",1,"817041359101",,2020-11-22 17:25:03.000,0,,,,,,,,,,,,,ja,,,,,,,
111970,nyans228@icloud.com,ありさ,0,nyans228,2020-11-22 02:20:22.000,"08051475700","30979",1,,,,,,,,,,,,,,0,"","","","","","","",1,"818051475700",,2023-05-28 11:08:13.000,0,,,,,,,,,,,,,ja,,,,,,,
119780,waterfall-rapid@t.vodafone.ne.jp,あお,0,takiser0,2020-11-29 11:44:16.000,"08034199674","77746",1,分須美沙子,"332-0034","11",川口市並木3-30-9,オークコーポラス402,"080-3419-9674",1,分須美沙子,"332-0034","11",川口市並木3-30-9,オークコーポラス402,"080-3419-9674",0,"","","","","","","",1,"818034199674",20220912150113,2020-11-29 11:57:32.000,0,,,,,,,,,,,,,ja,,,,,,,
825740,,焼きおにぎり,0,,2022-11-06 22:50:27.000,,,0,,,,,,,,,,,,,,0,読み垢・界隈理解 20↑,,,,,,,1,,,2022-11-06 22:50:27.000,0,,,,,,,,,,,,,ja,,,,"1155068854428549120","1155068854428549120-LCeR1MSvpgrDKU0CmhEkABAqKq7PZg",sD6YF4NqtA9xsaVFXrY7c7I6qULNKLv2B8mECACatPu0Z,
735721,k.miyuu1121@gmail.com,みみすけ,0,be7f88b45e9a3c2e3ebdc19ec1481e74,2022-08-19 20:34:07.000,"08090175720","14618",1,小松美結,"019-1605","5",大仙市太田町国見字相野32,"","080-9017-5720",1,小松美結,"019-1605","5",大仙市太田町国見字相野32,"","080-9017-5720",0,"20↑腐女子。五受け",pixiv,https://www.pixiv.net/users/66134552,Twitter,https://twitter.com/mimi_suke33,potofu,https://potofu.me/mimi-suke33,1,"818090175720",,2023-02-11 14:56:15.000,0,,,,"",,,,,,,,,ja,,,,"1371499607507701765","1371499607507701765-p0XezvDLVNt9brDlojKbejAaddJBwP",dnobHlzMVjMFOTORRWKGMlOxphXpGJTJUL07Zy1wfmF7y,
137593,egoneri.gtkn@gmail.com,TOGA,0,ff7a4c067cc84aca6a00638b1d0f831e,2020-12-20 11:03:48.000,"08031177009","60479",1,,,,,,,,,,,,,,0,"","","","","","","",1,"818031177009",,2020-12-20 12:49:56.000,0,,,,,,,,,,,,,ja,,,,,,,
977486,oaqbe17646@yahoo.co.jp,ぽにさん,0,Ayane1016,2023-05-24 23:57:40.000,"08079400679","71643",1,,,,,,,1,谷内彩音,"370-0411","10",太田市亀岡町93-3,"","080-7940-0679",0,"","","","","","","",1,"818079400679",,2023-06-17 12:36:09.000,0,,,,"",,,,,,,,,ja,,,,"1617607491210313737","1617607491210313737-6SEqes761fkyhMi2non4pLG8eb3Woo",BF1gmIEUsqEAnbB6n8LT6bXcP8D0oT4Qi6Q7g5TVy65Qw,
199700,all.things.must.pass_momoo@docomo.ne.jp,lop_nur ,0,"66f7742355bb047c4757587f885e0ff6",2021-03-27 13:21:09.000,"09043919701","",0,,,,,,,1,谷　ももお,"190-0022","13",立川市錦町3ー7ー9,マイキャッスル立川403号,"090-4391-9701",0,"","","","","","","",1,"819043919701",,2023-06-28 13:55:37.000,0,,,,"","","","","","","","","",ja,,,,,,,
372431,polepole.senkawa@gmail.com,めめこ,0,polepole,2021-10-14 03:47:54.000,"08060420645","70828",1,,,,,,,,,,,,,,0,"","","","","","","",1,"818060420645",,2021-10-14 03:55:08.000,0,,,,,,,,,,,,,ja,,,,,,,
203008,nirakan1414toshi@docomo.ne.jp,"14",0,murakami14,2021-03-28 20:13:59.000,"09052065682","17153",1,,,,,,,,,,,,,,0,"","","","","","","",1,"819052065682",,2021-03-28 20:17:54.000,0,,,,,,,,,,,,,ja,,,,,,,
924911,,よるこ,1,,2023-03-12 19:42:38.000,,,0,,,,,,,,,,,,,,0,"20↑?　主にいいね、リプ  たまに思った事?　雑食",,,,,,,1,,,2023-03-12 19:44:43.000,0,,,,,,,,,,,,,ja,,,,"966630422154158080","966630422154158080-0rtqP7XdFjxqAeSOBwogEHdRvjd4660",m9FRP6aePhktNjEDvLt2LnxXkVa0P5ei1MUZslhsC0Xyv,
249104,guiltylove1000@gmail.com,飛べない魔法使い,0,"9d4a9379ff73e68fd9ea5176f0e325c7",2021-05-30 14:17:32.000,"09045453006","31392",1,,,,,,,,,,,,,,0,"","","","","","","",1,"819045453006",,2021-05-30 14:36:30.000,0,,,,,,,,,,,,,ja,,,,,,,
64296,chabensaki@gmail.com,"63",0,"941270a0d7c62655992901aa767a21eb",2020-09-20 18:20:26.000,"09067521291","38984",1,,,,,,,,,,,,,,0,"",Twitter,https://mobile.twitter.com/fl_zt63,"","","","",1,"819067521291",20220912150113,2021-07-23 22:19:52.000,1,"",お,bift53uucyvozs7glih70j17js1vgo1h,,,,,,,,,,ja,,,,,,,
317684,keepout_13_xxx@yahoo.co.jp,麺屋,0,reuben,2021-08-15 12:02:26.000,"09054966583","20717",1,酒出かれん,"310-0055","8",水戸市袴塚2-4-18,"","090-5496-6583",1,酒出かれん,"310-0055","8",水戸市袴塚2-4-18,"","090-5496-6583",0,"",Twitter,https://twitter.com/jmenya999,pictSPACE-ONE,https://pictspace.net/7arg730b04,ポイピク,https://poipiku.com/6290192/,1,"819054966583",20221022231704,2022-10-22 23:29:35.000,3,"",濃厚魚介豚骨,"","","0130",ジョウヨウ,"172",ワタリ,"1","1443584",サカイデ　カレン,"1",ja,,,,,,,

Because pictSQUARE is a service related to otaku culture, you can try the same credentials on Pixiv and similar. This is made much easier by the fact that a lot of users have their Pixiv/Twitter/etc specified in URLs.

I'm planning on selling the data to up to 3 people.

Price: 4 XMR.

Contact: email pleaseuser2@proton.me (preferred)
Telegram: @Bindefos

[Bindefos]

Sold two copies total for now, will only sell one more.

[Accelerator]

Still available?

[Bindefos]

Still available?

yep, no 3rd buyer yet  although the event is getting bigger and bigger, some other services have already started warning their customers about the breach (like skeb and Pixiv)

[wacosed]

Is it email and password data?

[Bindefos]

Is it email and password data?

the sample is in the OP, although specifically email + password combo is less rows because some are missing emails, some are missing passwords:

select count(*) from users_pwd_new where length(mail) > 0 and length(password) > 0;

> 562,684 rows

out of those 268,172 users passwords are still md5 hashes and 294,512 are decrypted (mostly simpler passwords)

I can give you a larger sample in private if you want to, Telegram's in the OP

[Bindefos]

Last copy sold, no more sales.