Mac Forums data breach: 326K accounts exposed
Severity: high · Patch status: no-fix-needed · Since 2018-10-29
In July 2016, the self-proclaimed "Ultimate Source For Your Mac" website Mac Forums suffered a data breach. The vBulletin-based system exposed over 326k usernames, email and IP addresses, dates of birth and passwords stored as salted MD5 hashes. The data was later discovered being traded on a popular hacking forum. Mac Forums did not respond when contacted about the incident via their contact us form. Exposed data: dates of birth, email addresses, ip addresses, passwords, usernames. The breach dates from Jul 3, 2016; Have I Been Pwned loaded it on Oct 29, 2018.
What to do
- If you had a Mac Forums account, change its password and the password of any other account that reused it.
- Turn on multi-factor authentication wherever it is offered.
- Check whether your addresses are in this breach at https://haveibeenpwned.com.
- Expect targeted phishing that quotes the leaked details; verify any unexpected contact out of band.
Sources
All live incidents on Threat Watch
