A full report by CSO Online’s Salted Hash details a message it received by an anonymous source of a screenshot of a carder forum that claims to be selling “More than 150 Million Fresh Logins Available for Uber , Netflix … and many more.” The information is being sold for $250,000.
If the post on the carder forum is true, it does bring to light some of the sensitive information that may have been exposed as a result of the vulnerability. Cloudflare previously indicated that the leak resulted in the exposure of “HTTP cookies, authentication tokens, HTTP POST bodies, and other sensitive data.”
There is a chance that the login information found on the carder forum falls into the “other sensitive data” bucket described by Cloudflare.