Evite data breach: 101.0M accounts exposed
Severity: critical · Patch status: no-fix-needed · Since 2019-07-14
In April 2019, the social planning website for managing online invitations Evite identified a data breach of their systems. Upon investigation, they found unauthorised access to a database archive dating back to 2013. The exposed data included a total of 101 million unique email addresses, most belonging to recipients of invitations. Members of the service also had names, phone numbers, physical addresses, dates of birth, genders and passwords stored in plain text exposed. Exposed data: dates of birth, email addresses, genders, names, passwords, phone numbers, physical addresses. The breach dates from Aug 11, 2013; Have I Been Pwned loaded it on Jul 14, 2019.
What to do
- If you had a Evite account, change its password and the password of any other account that reused it.
- Turn on multi-factor authentication wherever it is offered.
- Check whether your addresses are in this breach at https://haveibeenpwned.com.
- Expect targeted phishing that quotes the leaked details; verify any unexpected contact out of band.
Sources
All live incidents on Threat Watch
