GeekedIn data breach: 1.1M accounts exposed
Severity: medium · Patch status: no-fix-needed · Since 2016-11-17
In August 2016, the technology recruitment site GeekedIn left a MongoDB database exposed and over 8M records were extracted by an unknown third party. The breached data was originally scraped from GitHub in violation of their terms of use and contained information exposed in public profiles, including over 1 million members' email addresses. Full details on the incident (including how impacted members can see their leaked data) are covered in the blog post on 8 million GitHub profiles were leaked from GeekedIn's MongoDB - here's how to see yours. Exposed data: email addresses, geographic locations, names, professional skills, usernames, years of professional experience. The breach dates from Aug 15, 2016; Have I Been Pwned loaded it on Nov 17, 2016.
What to do
- If you had a GeekedIn account, change its password and the password of any other account that reused it.
- Turn on multi-factor authentication wherever it is offered.
- Check whether your addresses are in this breach at https://haveibeenpwned.com.
Sources
All live incidents on Threat Watch
