Mate1.com data breach: 27.4M accounts exposed
Severity: high · Patch status: no-fix-needed · Since 2016-04-14
In February 2016, the dating site mate1.com suffered a huge data breach resulting in the disclosure of over 27 million subscribers' information. The data included deeply personal information about their private lives including drug and alcohol habits, incomes levels and sexual fetishes as well as passwords stored in plain text. Exposed data: astrological signs, dates of birth, drinking habits, drug habits, education levels, email addresses, ethnicities, fitness levels, genders, geographic locations, income levels, job titles, names, parenting plans, passwords, personal descriptions, physical attributes, political views, relationship statuses, religions, sexual fetishes, travel habits, usernames, website activity, work habits. The breach dates from Feb 29, 2016; Have I Been Pwned loaded it on Apr 14, 2016.
What to do
- If you had a Mate1.com account, change its password and the password of any other account that reused it.
- Turn on multi-factor authentication wherever it is offered.
- Check whether your addresses are in this breach at https://haveibeenpwned.com.
- Expect targeted phishing that quotes the leaked details; verify any unexpected contact out of band.
Sources
All live incidents on Threat Watch
