Explore Talent (August 2024) data breach: 8.9M accounts exposed
Severity: medium · Patch status: no-fix-needed · Since 2024-08-19
In August 2024, a slew of security vulnerabilities were identified with a conglomerate of online services which included the talent network Explore Talent. A vulnerable API exposed the personal records of 11.4M users of the service of which 8.9M unique email addresses were provided to HIBP. This incident is separate to the Explore Talent breach which occurred in 2022 and was loaded into HIBP in July 2024. Exposed data: email addresses. The breach dates from Aug 15, 2024; Have I Been Pwned loaded it on Aug 19, 2024.
What to do
- If you had a Explore Talent (August 2024) account, change its password and the password of any other account that reused it.
- Turn on multi-factor authentication wherever it is offered.
- Check whether your addresses are in this breach at https://haveibeenpwned.com.
Sources
All live incidents on Threat Watch