ClearVoice Surveys data breach: 15.1M accounts exposed
Severity: high · Patch status: no-fix-needed · Since 2021-04-23
In April 2021, the market research surveys company ClearVoice Surveys had a publicly facing database backup from 2015 taken and redistributed on a popular hacking forum. The data included 15M unique email addresses across more than 17M rows of data that also included names, physical and IP addresses, genders, dates of birth and plain text passwords. ClearVoice Surveys advised they were aware of the breach and confirmed its authenticity. Exposed data: dates of birth, email addresses, genders, ip addresses, names, passwords, phone numbers, physical addresses. The breach dates from Aug 23, 2015; Have I Been Pwned loaded it on Apr 23, 2021.
What to do
- If you had a ClearVoice Surveys account, change its password and the password of any other account that reused it.
- Turn on multi-factor authentication wherever it is offered.
- Check whether your addresses are in this breach at https://haveibeenpwned.com.
- Expect targeted phishing that quotes the leaked details; verify any unexpected contact out of band.
Sources
All live incidents on Threat Watch
