Minecraft World Map data breach: 71K accounts exposed
Severity: high · Patch status: no-fix-needed · Since 2016-08-29
In approximately January 2016, the Minecraft World Map site designed for sharing maps created for the game was hacked and over 71k user accounts were exposed. The data included usernames, email and IP addresses along with salted and hashed passwords. Exposed data: email addresses, ip addresses, passwords, usernames. The breach dates from Jan 15, 2016; Have I Been Pwned loaded it on Aug 29, 2016.
What to do
- If you had a Minecraft World Map account, change its password and the password of any other account that reused it.
- Turn on multi-factor authentication wherever it is offered.
- Check whether your addresses are in this breach at https://haveibeenpwned.com.
- Expect targeted phishing that quotes the leaked details; verify any unexpected contact out of band.
Sources
All live incidents on Threat Watch