Mashable data breach: 1.4M accounts exposed
Severity: medium · Patch status: no-fix-needed · Since 2020-11-10
In approximately mid-2020, Mashable suffered a data breach that subsequently turned up publicly in November 2020. The data included 1.4 million unique email addresses along with names, genders, expired auth tokens, physical locations, links to social media profiles and days and months of birth. The data was provided to HIBP by dehashed.com. Exposed data: auth tokens, email addresses, genders, geographic locations, ip addresses, names, partial dates of birth, social media profiles. The breach dates from Jun 1, 2020; Have I Been Pwned loaded it on Nov 10, 2020.
What to do
- If you had a Mashable account, change its password and the password of any other account that reused it.
- Turn on multi-factor authentication wherever it is offered.
- Check whether your addresses are in this breach at https://haveibeenpwned.com.
Sources
All live incidents on Threat Watch