CrimeAgency vBulletin Hacks data breach: 942K accounts exposed
Severity: high · Patch status: no-fix-needed · Since 2017-03-21
In January 2016, a large number of unpatched vBulletin forums were compromised by an actor known as "CrimeAgency". A total of 140 forums had data including usernames, email addresses and passwords (predominantly stored as salted MD5 hashes), extracted and then distributed. Refer to the complete list of the forums for further information on which sites were impacted. Exposed data: email addresses, passwords, usernames. The breach dates from Jan 19, 2017; Have I Been Pwned loaded it on Mar 21, 2017.
What to do
- If you had a CrimeAgency vBulletin Hacks account, change its password and the password of any other account that reused it.
- Turn on multi-factor authentication wherever it is offered.
- Check whether your addresses are in this breach at https://haveibeenpwned.com.
- Expect targeted phishing that quotes the leaked details; verify any unexpected contact out of band.
Sources
All live incidents on Threat Watch
