What Happened
In August 2024, Mykukun, an AI-powered home renovation marketplace that collaborates with major banks including NYK, SOFI, and USBank, experienced a significant data breach. The breach was discovered on August 28, 2024, and was attributed to threat actors identified as either “IntelBroker” or “KillSecurity” depending on the source. The compromised data included approximately 2.7 million lines of user information, encompassing User IDs, usernames, emails, names, addresses, phone numbers, profile images, activation keys, and account metadata from users across multiple financial institutions. The breach predominantly affected USBank members, and the exposed data was subsequently leaked on underground forums and Russian hacking forums, raising significant privacy concerns for the millions of customers whose personal and financial information was exposed.
