Verified data breach: 16K accounts exposed
Severity: high · Patch status: no-fix-needed · Since 2014-07-06
In January 2014, one of the largest communities of Eastern Europe cybercriminals known as "Verified" was hacked. The breach exposed nearly 17k users of the vBulletin forum including their personal messages and other potentially personally identifiable information. Exposed data: email addresses, historical passwords, ip addresses, passwords, private messages, usernames, website activity. The breach dates from Jan 10, 2014; Have I Been Pwned loaded it on Jul 6, 2014.
What to do
- If you had a Verified account, change its password and the password of any other account that reused it.
- Turn on multi-factor authentication wherever it is offered.
- Check whether your addresses are in this breach at https://haveibeenpwned.com.
- Expect targeted phishing that quotes the leaked details; verify any unexpected contact out of band.
Sources
All live incidents on Threat Watch