Flash Flash Revolution (2019 breach) data breach: 1.9M accounts exposed
Severity: high · Patch status: no-fix-needed · Since 2019-07-21
In July 2019, the music-based rhythm game Flash Flash Revolution suffered a data breach. The 2019 breach imapcted almost 1.9 million members and is in addition to the 2016 data breach of the same service. Email and IP addesses, usernames, dates of birth and salted MD5 hashes were all exposed in the breach. The data was provided with support from dehashed.com. Exposed data: dates of birth, email addresses, ip addresses, passwords, usernames. The breach dates from Jul 16, 2019; Have I Been Pwned loaded it on Jul 21, 2019.
What to do
- If you had a Flash Flash Revolution (2019 breach) account, change its password and the password of any other account that reused it.
- Turn on multi-factor authentication wherever it is offered.
- Check whether your addresses are in this breach at https://haveibeenpwned.com.
- Expect targeted phishing that quotes the leaked details; verify any unexpected contact out of band.
Sources
All live incidents on Threat Watch