GiveSendGo, a crowdfunding website used to obtain donations for Canadian truck drivers’ “Freedom Convoy” protest, has been taken offline in an apparent hack and information about alleged donors has leaked online.
On Sunday night, the GiveSendGo domain started redirecting to a new domain – GiveSendGone[.]wtf — and be the first to show a video loop of Disney’s Frozen noticed by Daily Point journalist Mikael Thalen. The video was accompanied by text criticizing the fundraising site and linking it to the January 6 U.S. uprising.
Calling itself “the number one free Christian crowdfunding platform,” GiveSendGo had already emerged as the launch pad for fundraising to help cover legal costs for Trump supporters accused of participating in the Capitol uprising.
It quickly became the number one fundraising choice for the self-proclaimed “Freedom Convoy” after the more prominent platform GoFundMe said it would withhold millions of dollars in donations to the truck drivers, citing police reports of violence and other illegal activities. Canadian banks had already started blocking funds related to the convoy, with TD freezing two personal accounts containing more than $1 million in donor money.
As donors flocked to the new platform, a security researcher warned TechCrunch that an Amazon S3 bucket — a cloud storage service used to host online files — had been set up insecurely by GiveSendGo and had gigabytes of donor data to the Freedom Convoy. exposed, including photos and passport scans.
The cloud storage issue was said to have been resolved last week after TechCrunch notified the GiveSendGo management team, and the latest hack appears to be another compromise from the site.
The leaked donor information was obtained by the data breach hosting website Distributed Denial of Secretswhich, due to the presence of sensitive personal information, has only granted access to journalists and researchers.
A copy of the data obtained by: The edge contained nearly 93,000 entries, including names, email addresses, zip codes, and country of origin. Of the email addresses listed in the database, a handful of domains ending in “.gov,” a domain reserved for government agencies, appear to belong to employees of the TSA, the Department of Justice, the Bureau of Prisons and NASA.
The US makes up more than half of the donor country’s entries, followed by Canada and then Britain, supporting concerns expressed in the Canadian media that foreign money has supported the protest.
A request for comment sent to GiveSendGo had not received a response at the time of publication.