Technic data breach: 265K accounts exposed
Severity: high · Patch status: no-fix-needed · Since 2018-12-04
In November 2018, the Minecraft modpack platform known as Technic suffered a data breach. Technic promptly disclosed the breach and advised that the impacted data included over 265k unique users' email and IP addresses, chat logs, private messages and passwords stored as bcrypt hashes with a work factor of 13. Technic self-submitted the breach to HIBP. Exposed data: chat logs, email addresses, ip addresses, passwords, private messages, time zones. The breach dates from Nov 30, 2018; Have I Been Pwned loaded it on Dec 4, 2018.
What to do
- If you had a Technic account, change its password and the password of any other account that reused it.
- Turn on multi-factor authentication wherever it is offered.
- Check whether your addresses are in this breach at https://haveibeenpwned.com.
- Expect targeted phishing that quotes the leaked details; verify any unexpected contact out of band.
Sources
All live incidents on Threat Watch
