KM.RU data breach: 1.5M accounts exposed
Severity: medium · Patch status: no-fix-needed · Since 2016-03-03
In February 2016, the Russian portal and email service KM.RU was the target of an attack which was consequently detailed on Reddit. Allegedly protesting "the foreign policy of Russia in regards to Ukraine", KM.RU was one of several Russian sites in the breach and impacted almost 1.5M accounts including sensitive personal information. Exposed data: dates of birth, email addresses, genders, geographic locations, recovery email addresses, security questions and answers, usernames. The breach dates from Feb 29, 2016; Have I Been Pwned loaded it on Mar 3, 2016.
What to do
- If you had a KM.RU account, change its password and the password of any other account that reused it.
- Turn on multi-factor authentication wherever it is offered.
- Check whether your addresses are in this breach at https://haveibeenpwned.com.
Sources
All live incidents on Threat Watch