Hackers exposed roughly 3.4 million user records, together with usernames, electronic mail addresses and IP addresses, of marijuana cultivators at GrowDiaries.com, a web-based neighborhood the place growers weblog about their crops and may promote seeds to different growers.

The safety breach occurred Sept. 22 and was reportedly found Oct. 10 by Volodymyr Diachenko, a database safety researcher.

Diachenko mentioned he instantly reported the safety breach to Grow Diaries, which secured it 5 days later. Diachenko revealed a report concerning the incident on Nov. 3 on LinkedIn.

Grow Diaries didn’t instantly reply to a request for remark. It’s not clear what number of customers Grow Diaries has or if they’re primarily industrial or dwelling growers.

The IP addresses span a spread of provinces and nations, Diachenko wrote.

The assault poses totally different threats to customers, Diachenko wrote, together with phishing assaults and makes an attempt to make use of the stolen information on different purposes.