Tibber data breach: 50K accounts exposed
Severity: medium · Patch status: no-fix-needed · Since 2024-12-14
In November 2024, the German electricity provider Tibber suffered a data breach that exposed the personal information of 50k customers. The data included names, email addresses, geographic locations (city and postcode) and total spend on purchases. Exposed data: email addresses, geographic locations, names, purchases. The breach dates from Nov 10, 2024; Have I Been Pwned loaded it on Dec 14, 2024.
What to do
- If you had a Tibber account, change its password and the password of any other account that reused it.
- Turn on multi-factor authentication wherever it is offered.
- Check whether your addresses are in this breach at https://haveibeenpwned.com.
Sources
All live incidents on Threat Watch