Nival data breach: 1.5M accounts exposed
Severity: medium · Patch status: no-fix-needed · Since 2016-03-03
In February 2016, the Russian gaming company Nival was the target of an attack which was consequently detailed on Reddit. Allegedly protesting "the foreign policy of Russia in regards to Ukraine", Nival was one of several Russian sites in the breach and impacted over 1.5M accounts including sensitive personal information. Exposed data: avatars, dates of birth, email addresses, genders, names, spoken languages, usernames, website activity. The breach dates from Feb 29, 2016; Have I Been Pwned loaded it on Mar 3, 2016.
What to do
- If you had a Nival account, change its password and the password of any other account that reused it.
- Turn on multi-factor authentication wherever it is offered.
- Check whether your addresses are in this breach at https://haveibeenpwned.com.
Sources
All live incidents on Threat Watch