GoldSilver Data Breach (2018): What Was Exposed & What To Do

GoldSilver, a bullion education and dealer services site, experienced a data breach reported on October 21, 2018. The incident exposed information belonging to 243,000 unique email addresses associated with customers and mailing list subscribers. Public records indicate that an extensive set of personal details was obtained, along with source code, and both were posted on a dark web service. The breach remains limited in confirmed technical detail. No official statement on the method of intrusion, exact timeline of access, or full scope of files has been released beyond the reported exposure of customer records.

Inside the incident

The breach affected GoldSilver’s customer and subscriber database. Records show that names, physical addresses, phone numbers, email addresses, IP addresses, bank account numbers, and partial credit card data were accessed. In a smaller subset of records, passport numbers and social security numbers also appeared. Passwords and answers to security questions were present in hashed form using the MD5 algorithm. Purchases tied to customer accounts were included in the material that was later posted publicly.

How a breach like this happens

Incidents involving online retail and service platforms often begin with the compromise of a web application or server through unpatched software, weak authentication controls, or stolen credentials. Once initial access is gained, attackers may locate and extract database contents before exfiltrating them. In many cases the data is later shared or sold on forums and dark web marketplaces, which is how the material from this event became publicly visible.

Who is GoldSilver?

GoldSilver operates as an online dealer and educational resource in the precious metals sector. Organizations of this type routinely collect and store customer identification details, contact information, and payment data to process purchases and maintain mailing lists. A breach at such a firm is consequential because the records typically contain financial identifiers and government-issued documents that retain long-term value for identity verification and account access.

The information in question

The data types reported as exposed include bank account numbers, email addresses, IP addresses, names, partial credit card data, passport numbers, phone numbers, and physical addresses. Additional fields referenced in summaries of the incident are purchases, passwords stored as MD5 hashes, answers to security questions also stored as MD5 hashes, and, in a limited number of cases, social security numbers. The precise volume or completeness of each category remains unconfirmed beyond the headline figure of 243,000 email addresses.

What's at stake

For individuals, the presence of financial account numbers, government identifiers, and hashed credentials raises the possibility of account takeover attempts or identity misuse over an extended period. For the organization, the public posting of customer records and source code can lead to regulatory scrutiny, loss of customer trust, and costs associated with notification and remediation. Because MD5 hashes are considered weak by current standards, the password data carries elevated risk of offline cracking.

If your data was in this breach

Begin by changing passwords on the affected account and any other sites where the same credentials may have been reused. Enable multi-factor authentication wherever available and monitor bank and credit card statements for unauthorized activity. Request credit reports from major bureaus to check for new accounts opened without consent. Readers can run a free exposure scan of their email address to determine whether their information appears in known breach data sets.

AICompiled with AI assistance from public sources and published under our editorial standards.