Muslim Match data breach: 149K accounts exposed
Severity: high · Patch status: no-fix-needed · Since 2016-06-29
In June 2016, the Muslim Match dating website had 150k email addresses exposed. The data included private chats and messages between relationship seekers and numerous other personal attributes including passwords hashed with MD5. Exposed data: chat logs, email addresses, geographic locations, ip addresses, passwords, private messages, user statuses, usernames. The breach dates from Jun 24, 2016; Have I Been Pwned loaded it on Jun 29, 2016.
What to do
- If you had a Muslim Match account, change its password and the password of any other account that reused it.
- Turn on multi-factor authentication wherever it is offered.
- Check whether your addresses are in this breach at https://haveibeenpwned.com.
- Expect targeted phishing that quotes the leaked details; verify any unexpected contact out of band.
Sources
All live incidents on Threat Watch