Security News > 2020 > November > GrowDiaries Exposes Emails, Passwords of 1.4M Cannabis Growers

A database linked to GrowDiaries, an online community of cannabis growers, has exposed more than a million users' email addresses, passwords, IP address records and posts.

GrowDiaries is a robust online community of cannabis growing enthusiasts from around the world, where they can share tips, tricks and pictures of their progress.

GrowDiaries has not responded to Threatpost's inquiries about the reported breach, however the site's FAQ section reassures users their data will be protected on the platform.

"GrowDiaries is completely safe to use and store information on," according to the GrowDiaries site.

Diachenko said, GrowDiaries members should be on the lookout for phishing attacks and to update passwords across all platforms because the compromised credentials could be used in "Stuffing" attacks, which he explains involves automated bots plugging in stolen passwords and usernames in various combinations in an attempt to breach other apps and sites.

News URL

https://threatpost.com/growdiaries-emails-passwords-cannabis-growers/160969/