Appen data breach: 5.9M accounts exposed
Severity: high · Patch status: no-fix-needed · Since 2020-07-30
In June 2020, the AI training data company Appen suffered a data breach exposing the details of almost 5.9 million users which were subsequently sold online. Included in the breach were names, email addresses and passwords stored as bcrypt hashes. Some records also contained phone numbers, employers and IP addresses. The data was provided to HIBP by dehashed.com. Exposed data: email addresses, employers, ip addresses, names, passwords, phone numbers. The breach dates from Jun 22, 2020; Have I Been Pwned loaded it on Jul 30, 2020.
What to do
- If you had a Appen account, change its password and the password of any other account that reused it.
- Turn on multi-factor authentication wherever it is offered.
- Check whether your addresses are in this breach at https://haveibeenpwned.com.
- Expect targeted phishing that quotes the leaked details; verify any unexpected contact out of band.
Sources
All live incidents on Threat Watch
