TaiLieu data breach: 7.3M accounts exposed
Severity: high · Patch status: no-fix-needed · Since 2020-05-03
In November 2019, the Vietnamese education website TaiLieu allegedly suffered a data breach exposing 7.3M customer records. Impacted data included names and usernames, email addresses, dates of birth, genders and passwords stored as unsalted MD5 hashes. The data was provided to HIBP by dehashed.com after being shared on a popular hacking forum. TaiLieu did not respond when contacted about the incident. Exposed data: dates of birth, email addresses, genders, geographic locations, names, passwords, phone numbers, usernames. The breach dates from Nov 24, 2019; Have I Been Pwned loaded it on May 3, 2020.
What to do
- If you had a TaiLieu account, change its password and the password of any other account that reused it.
- Turn on multi-factor authentication wherever it is offered.
- Check whether your addresses are in this breach at https://haveibeenpwned.com.
- Expect targeted phishing that quotes the leaked details; verify any unexpected contact out of band.
Sources
All live incidents on Threat Watch