Playbook data breach: 50K accounts exposed
Severity: high · Patch status: no-fix-needed · Since 2021-10-11
In September 2021, a publicly accessible PostgresSQL database belonging to the Playbook service was identified. Run by VC firm Plug and Play Ventures, the database had been exposed since October 2020 and contained more than 50 thousand unique email addresses along with names, phone numbers, job titles and passwords stored as PBKDF2 hashes. It took more than 2 weeks after being notified of the exposed data to properly secure it. It's unknown whether Plug and Play Ventures notified impacted individuals as they ceased responding to queries from the press. Exposed data: email addresses, job titles, names, passwords, phone numbers, social media profiles. The breach dates from Oct 19, 2020; Have I Been Pwned loaded it on Oct 11, 2021.
What to do
- If you had a Playbook account, change its password and the password of any other account that reused it.
- Turn on multi-factor authentication wherever it is offered.
- Check whether your addresses are in this breach at https://haveibeenpwned.com.
- Expect targeted phishing that quotes the leaked details; verify any unexpected contact out of band.
Sources
All live incidents on Threat Watch
