Key facts as reported:

• The marketplace, Rydox, facilitated the sale of stolen data and credential sets along with tooling used to carry out further cybercrime.
• The operator is a Kosovar national who has admitted to running the site.
• The maximum exposure is 22 years behind bars, though actual sentencing will be determined by the court.

The case underscores the continued pressure law enforcement is placing on underground marketplaces that broker compromised credentials and personal data. For defenders, it's a reminder that credentials exposed through such markets can resurface in attacks long after the original breach.

Source: BleepingComputer

Does your organization monitor for credential exposure tied to underground markets like this, and how do you handle resets when employee data surfaces?