Doxbin data breach: 370K accounts exposed
Severity: high · Patch status: no-fix-needed · Since 2022-01-08
In January 2022, the "doxing" website designed to disclose the personal information of targeted individuals ("doxes") Doxbin suffered a data breach. The breach was subsequently leaked online and included over 370k unique email addresses across user accounts and doxes. User accounts also included usernames, password hashes and browser user agents. The personal information disclosed in the doxes was often extensive including names, physical addresses, phone numbers and more. Exposed data: browser user agent details, email addresses, passwords, usernames. The breach dates from Jan 5, 2022; Have I Been Pwned loaded it on Jan 8, 2022.
What to do
- If you had a Doxbin account, change its password and the password of any other account that reused it.
- Turn on multi-factor authentication wherever it is offered.
- Check whether your addresses are in this breach at https://haveibeenpwned.com.
- Expect targeted phishing that quotes the leaked details; verify any unexpected contact out of band.
Sources
All live incidents on Threat Watch
