15-04-26, 08:24 AM
Hi folks,
BePrime is a Mexican Company based on Nuevo Leon, Mexico. They provide cybersecurity services to their customers (ironic). I'm leaking this so their customers know that THEIR DATA IS NOT SECURE.
So this is BePrime leak:
+10 GB databases (financial data, CRM customer information, automations)
+Credentials and secrets (some of them may still work)
+Information regarding his main customers (Bafar, Alsea, CTU) like devices info, public and private IP addresses and some data that can lead to service ennumerations, mails from IT personnel.
Also:
PostgreSQL superuser — 48 databases accessible, Docker container pivot to internal network
- Meraki API key — control/visibility over 1,858 devices across 6 orgs (BAFAR, Vitro, NAZAN, etc.), 8 cameras with GPS
- Salesforce CRM fully dumped — 175 opportunities (up to MXN $2.37M), 9,966 cases, 2,322 store locations
- 2.58M WiFi tracking records — MAC addresses + proximity data from office APs
- MinIO S3 — 21 buckets (43.68 GB) + cross-client Interceramic bucket
- N8N credentials extracted (Meraki, Webex, S3 keys)
- Cube.js Playground wide open
Key data extracted: ~10 of DB dumps + Meraki JSON, finance records (234K transactions), Little Caesars WiFi visitors, Webex NOC/SOC room members, OpenProject hashes, FortiMonitor 1,722 servers. Some credentials may still work (lol) and there are some interesting findings. I'll leave everything on an MD file.
For BePrime customers: Your data is not secure, actually, this info may lead to a potential compromise to your systems.
Files here:
https://gofile.io/d/6kGppu
BePrime is a Mexican Company based on Nuevo Leon, Mexico. They provide cybersecurity services to their customers (ironic). I'm leaking this so their customers know that THEIR DATA IS NOT SECURE.
So this is BePrime leak:
+10 GB databases (financial data, CRM customer information, automations)
+Credentials and secrets (some of them may still work)
+Information regarding his main customers (Bafar, Alsea, CTU) like devices info, public and private IP addresses and some data that can lead to service ennumerations, mails from IT personnel.
Also:
PostgreSQL superuser — 48 databases accessible, Docker container pivot to internal network
- Meraki API key — control/visibility over 1,858 devices across 6 orgs (BAFAR, Vitro, NAZAN, etc.), 8 cameras with GPS
- Salesforce CRM fully dumped — 175 opportunities (up to MXN $2.37M), 9,966 cases, 2,322 store locations
- 2.58M WiFi tracking records — MAC addresses + proximity data from office APs
- MinIO S3 — 21 buckets (43.68 GB) + cross-client Interceramic bucket
- N8N credentials extracted (Meraki, Webex, S3 keys)
- Cube.js Playground wide open
Key data extracted: ~10 of DB dumps + Meraki JSON, finance records (234K transactions), Little Caesars WiFi visitors, Webex NOC/SOC room members, OpenProject hashes, FortiMonitor 1,722 servers. Some credentials may still work (lol) and there are some interesting findings. I'll leave everything on an MD file.
For BePrime customers: Your data is not secure, actually, this info may lead to a potential compromise to your systems.
Files here:
https://gofile.io/d/6kGppu