Edmodo data breach: 43.4M accounts exposed
Severity: high · Patch status: no-fix-needed · Since 2017-06-01
In May 2017, the education platform Edmodo was hacked resulting in the exposure of 77 million records comprised of over 43 million unique customer email addresses. The data was consequently published to a popular hacking forum and made freely available. The records in the breach included usernames, email addresses and bcrypt hashes of passwords. Exposed data: email addresses, passwords, usernames. The breach dates from May 11, 2017; Have I Been Pwned loaded it on Jun 1, 2017.
What to do
- If you had a Edmodo account, change its password and the password of any other account that reused it.
- Turn on multi-factor authentication wherever it is offered.
- Check whether your addresses are in this breach at https://haveibeenpwned.com.
- Expect targeted phishing that quotes the leaked details; verify any unexpected contact out of band.
Sources
All live incidents on Threat Watch
