MeetMindful data breach: 1.4M accounts exposed
Severity: high · Patch status: no-fix-needed · Since 2021-01-31
In early 2020, the online dating service MeetMindful suffered a data breach that exposed 1.4 million unique customer email addresses. Included in the data was an extensive array of personal information used to find romantic matches including physical attributes, use of alcohol, drugs and cigarettes, marital statuses, birthdates, genders and the gender being sought. Additional personal information such as names, geographical locations and IP addresses were also exposed, along with passwords stored as bcrypt hashes. Exposed data: dates of birth, drinking habits, drug habits, email addresses, genders, geographic locations, ip addresses, marital statuses, names, passwords, physical attributes, religions, sexual orientations, smoking habits, social media profiles, usernames. The breach dates from Jan 26, 2020; Have I Been Pwned loaded it on Jan 31, 2021.
What to do
- If you had a MeetMindful account, change its password and the password of any other account that reused it.
- Turn on multi-factor authentication wherever it is offered.
- Check whether your addresses are in this breach at https://haveibeenpwned.com.
- Expect targeted phishing that quotes the leaked details; verify any unexpected contact out of band.
Sources
All live incidents on Threat Watch
