Quote:Clubhouse, the startup invitation-only chat app, is the latest social-media platform to see mammoth troves of user data collected and posted in underground forums. An SQL file containing the personal data of 1.3 million Clubhouse users has been posted in a hacker forum for free.
 
Names, user IDs, photo URL, number of followers, Twitter and Instagram handles, dates that accounts were created and even the profile information of who invited them to the app are among the information contained in the database, according to CyberNews, giving threat actors key information which can be used against victims in phishing and other socially engineered scams.
 
For its part, Clubhouse said that its users’ data being public isn’t a bug, it’s just how the platform is built: https://twitter.com/joinClubhouse/status/1381066324105854977?ref_src=twsrc%5Etfw%7Ctwcamp%5Etweetembed%7Ctwterm%5E1381066324105854977%7Ctwgr%5E%7Ctwcon%5Es1_&ref_url=https%3A%2F%2Fthreatpost.com%2Fclubhouse-users-data-hacker-forum%2F165354%2F
 
The company isn’t supplying any other details and Clubhouse didn’t respond to Threatpost’s request for additional comment.
 
Clubhouse followers on Twitter were quick to note the statement points out a difference without any distinction to its exposed users.
 
“I fail to see what is false … ” user Benjamin Maynard responded to the Clubhouse statement.