CyberServe data breach: 1.1M accounts exposed
Severity: high · Patch status: no-fix-needed · Since 2021-11-04
In October 2021, the Israeli hosting provider CyberServe was breached and ransomed before having a substantial amount of their customer data leaked publicly by a group known as "Black Shadow". Amongst the data was the LGBTQ dating site Atraf and the Machon Mor medical institute. Due to multiple different sites being compromised, the impacted data is broad and ranges from relationship information to medical data to email addresses and passwords stored in plain text. The data was made available to HIBP with support from May Brooks-Kempler, founder of the Think Safe Cyber community in Israel. Exposed data: dates of birth, drinking habits, email addresses, family structure, genders, geographic locations, hiv statuses, ip addresses, names, passwords, personal health data, phone numbers, physical attributes, private messages, profile photos, religions, sexual orientations, smoking habits, usernames. The breach dates from Oct 29, 2021; Have I Been Pwned loaded it on Nov 4, 2021.
What to do
- If you had a CyberServe account, change its password and the password of any other account that reused it.
- Turn on multi-factor authentication wherever it is offered.
- Check whether your addresses are in this breach at https://haveibeenpwned.com.
- Expect targeted phishing that quotes the leaked details; verify any unexpected contact out of band.
Sources
All live incidents on Threat Watch
