Pixel Federation data breach: 38K accounts exposed
Severity: high · Patch status: no-fix-needed · Since 2013-12-06
In December 2013, a breach of the web-based game community based in Slovakia exposed over 38,000 accounts which were promptly posted online. The breach included email addresses and unsalted MD5 hashed passwords, many of which were easily converted back to plain text. Exposed data: email addresses, passwords. The breach dates from Dec 4, 2013; Have I Been Pwned loaded it on Dec 6, 2013.
What to do
- If you had a Pixel Federation account, change its password and the password of any other account that reused it.
- Turn on multi-factor authentication wherever it is offered.
- Check whether your addresses are in this breach at https://haveibeenpwned.com.
- Expect targeted phishing that quotes the leaked details; verify any unexpected contact out of band.
Sources
All live incidents on Threat Watch
