Planet Ice data breach: 240K accounts exposed
Severity: high · Patch status: no-fix-needed · Since 2023-01-31
In January 2023, the UK-based ice skating rink booking service Planet Ice suffered a data breach. The incident exposed the personal data of 240k people including email and physical addresses, phone numbers, genders, dates of birth and passwords stored as MD5 hashes. The data also included the names, genders and dates of birth of children having parties. Exposed data: dates of birth, email addresses, genders, ip addresses, names, passwords, phone numbers, physical addresses, purchases. The breach dates from Jan 14, 2023; Have I Been Pwned loaded it on Jan 31, 2023.
What to do
- If you had a Planet Ice account, change its password and the password of any other account that reused it.
- Turn on multi-factor authentication wherever it is offered.
- Check whether your addresses are in this breach at https://haveibeenpwned.com.
- Expect targeted phishing that quotes the leaked details; verify any unexpected contact out of band.
Sources
All live incidents on Threat Watch
