Evony data breach: 29.4M accounts exposed
Severity: high · Patch status: no-fix-needed · Since 2017-03-25
In June 2016, the online multiplayer game Evony was hacked and over 29 million unique accounts were exposed. The attack led to the exposure of usernames, email and IP addresses and MD5 hashes of passwords (without salt). Exposed data: email addresses, ip addresses, passwords, usernames. The breach dates from Jun 1, 2016; Have I Been Pwned loaded it on Mar 25, 2017.
What to do
- If you had a Evony account, change its password and the password of any other account that reused it.
- Turn on multi-factor authentication wherever it is offered.
- Check whether your addresses are in this breach at https://haveibeenpwned.com.
- Expect targeted phishing that quotes the leaked details; verify any unexpected contact out of band.
Sources
All live incidents on Threat Watch
