Insanelyi data breach: 104K accounts exposed
Severity: high · Patch status: no-fix-needed · Since 2014-07-22
In July 2014, the iOS forum Insanelyi was hacked by an attacker known as Kim Jong-Cracks. A popular source of information for users of jailbroken iOS devices running Cydia, the Insanelyi breach disclosed over 104k users' emails addresses, user names and weakly hashed passwords (salted MD5). Exposed data: email addresses, passwords, usernames, website activity. The breach dates from Jul 22, 2014; Have I Been Pwned loaded it on Jul 22, 2014.
What to do
- If you had a Insanelyi account, change its password and the password of any other account that reused it.
- Turn on multi-factor authentication wherever it is offered.
- Check whether your addresses are in this breach at https://haveibeenpwned.com.
- Expect targeted phishing that quotes the leaked details; verify any unexpected contact out of band.
Sources
All live incidents on Threat Watch