Freedom Hosting II data breach: 380K accounts exposed
Severity: high · Patch status: no-fix-needed · Since 2017-02-05
In January 2017, the free hidden service host Freedom Hosting II suffered a data breach. The attack allegedly took down 20% of dark web sites running behind Tor hidden services with the attacker claiming that of the 10,613 impacted sites, more than 50% of the content was child pornography. The hack led to the exposure of MySQL databases for the sites which included a vast amount of information on the hidden services Freedom Hosting II was managing. The impacted data classes far exceeds those listed for the breach and differ between the thousands of impacted sites. Exposed data: email addresses, passwords, usernames. The breach dates from Jan 31, 2017; Have I Been Pwned loaded it on Feb 5, 2017.
What to do
- If you had a Freedom Hosting II account, change its password and the password of any other account that reused it.
- Turn on multi-factor authentication wherever it is offered.
- Check whether your addresses are in this breach at https://haveibeenpwned.com.
- Expect targeted phishing that quotes the leaked details; verify any unexpected contact out of band.
Sources
All live incidents on Threat Watch
