Marc Ruef, a security researcher at SCIP, posted a screenshot of a darknet post on Twitter that put up 3.8 billion Clubhouse phone numbers for sale. The problem is even more serious than it could be since the leak contains the phone numbers of the users of the social network and all the contacts from their phone books (access to them must be provided during registration).
Full phone number database of #Clubhouse is up for sale on the #Darknet… It contains 3.8 billion phone numbers. These are not just members but also people in contact lists that were synced. Chances are high that you are listed even if you haven’t had a Clubhouse login. pic.twitter.com/PfAkUJ0BL5
– Marc Ruef (@mruef) July 23, 2021
Some Twitter users have questioned the veracity of the leak, as recently the developers of the social network announced that since mid-May (since the launch of the Android version of the application), Clubhouse has added 10 million users. Even if we assume that at the moment, the total number of people registered on the social network is about 30 million, it turns out that each Clubhouse user should have an average of 126 numbers in the phone book.
Be that as it may, the author of the post on the darknet offers free access to a sample of leaked data – 83.5 million phone numbers from Japan. He also states that he intends to sell the database exclusively to one buyer.