Teracod data breach: 97K accounts exposed
Severity: high · Patch status: no-fix-needed · Since 2016-08-22
In May 2015, almost 100k user records were extracted from the Hungarian torrent site known as Teracod. The data was later discovered being torrented itself and included email addresses, passwords, private messages between members and the peering history of IP addresses using the service. Exposed data: avatars, email addresses, ip addresses, passwords, payment histories, private messages, usernames, website activity. The breach dates from May 28, 2016; Have I Been Pwned loaded it on Aug 22, 2016.
What to do
- If you had a Teracod account, change its password and the password of any other account that reused it.
- Turn on multi-factor authentication wherever it is offered.
- Check whether your addresses are in this breach at https://haveibeenpwned.com.
- Expect targeted phishing that quotes the leaked details; verify any unexpected contact out of band.
Sources
All live incidents on Threat Watch
