Russian America data breach: 182K accounts exposed
Severity: high · Patch status: no-fix-needed · Since 2018-09-13
In approximately 2017, the website for Russian speakers in America known as Russian America suffered a data breach. The incident exposed 183k unique records including names, email addresses, phone numbers and passwords stored in both plain text and as MD5 hashes. Russian America was contacted about the breach but did not respond. Exposed data: email addresses, names, passwords, phone numbers. The breach dates from Jan 1, 2017; Have I Been Pwned loaded it on Sep 13, 2018.
What to do
- If you had a Russian America account, change its password and the password of any other account that reused it.
- Turn on multi-factor authentication wherever it is offered.
- Check whether your addresses are in this breach at https://haveibeenpwned.com.
- Expect targeted phishing that quotes the leaked details; verify any unexpected contact out of band.
Sources
All live incidents on Threat Watch
