Go Ninja data breach: 5.0M accounts exposed
Severity: high · Patch status: no-fix-needed · Since 2023-11-30
In December 2019, the now defunct German gaming website Go Ninja suffered a data breach that exposed 5M unique email addresses. The impacted data included usernames, email and IP addresses and salted MD5 password hashes. More than 4M of the email addresses appeared to have been generated as opposed to organically provided by the user. Exposed data: email addresses, ip addresses, passwords, usernames. The breach dates from Dec 17, 2019; Have I Been Pwned loaded it on Nov 30, 2023.
What to do
- If you had a Go Ninja account, change its password and the password of any other account that reused it.
- Turn on multi-factor authentication wherever it is offered.
- Check whether your addresses are in this breach at https://haveibeenpwned.com.
- Expect targeted phishing that quotes the leaked details; verify any unexpected contact out of band.
Sources
All live incidents on Threat Watch
