Social Engineered data breach: 89K accounts exposed
Severity: high · Patch status: no-fix-needed · Since 2019-06-23
In June 2019, the "Art of Human Hacking" site Social Engineered suffered a data breach. The breach of the MyBB forum was published on a rival hacking forum and included 89k unique email addresses spread across 55k forum users and other tables in the database. The exposed data also included usernames, IP addresses, private messages and passwords stored as salted MD5 hashes. Exposed data: email addresses, ip addresses, passwords, private messages, usernames. The breach dates from Jun 13, 2019; Have I Been Pwned loaded it on Jun 23, 2019.
What to do
- If you had a Social Engineered account, change its password and the password of any other account that reused it.
- Turn on multi-factor authentication wherever it is offered.
- Check whether your addresses are in this breach at https://haveibeenpwned.com.
- Expect targeted phishing that quotes the leaked details; verify any unexpected contact out of band.
Sources
All live incidents on Threat Watch
