Modern Business Solutions data breach: 58.8M accounts exposed
Severity: high · Patch status: no-fix-needed · Since 2016-10-12
In October 2016, a large Mongo DB file containing tens of millions of accounts was shared publicly on Twitter (the file has since been removed). The database contained over 58M unique email addresses along with IP addresses, names, home addresses, genders, job titles, dates of birth and phone numbers. The data was subsequently attributed to "Modern Business Solutions", a company that provides data storage and database hosting solutions. They've yet to acknowledge the incident or explain how they came to be in possession of the data. Exposed data: dates of birth, email addresses, genders, ip addresses, job titles, names, phone numbers, physical addresses. The breach dates from Oct 8, 2016; Have I Been Pwned loaded it on Oct 12, 2016.
What to do
- If you had a Modern Business Solutions account, change its password and the password of any other account that reused it.
- Turn on multi-factor authentication wherever it is offered.
- Check whether your addresses are in this breach at https://haveibeenpwned.com.
- Expect targeted phishing that quotes the leaked details; verify any unexpected contact out of band.
Sources
All live incidents on Threat Watch
