Vianet data breach: 94K accounts exposed
Severity: medium · Patch status: no-fix-needed · Since 2020-04-22
In April 2020, the Nepalese internet service provider Vianet suffered a data breach. The attack on the ISP led to the exposure of 177k customer records including 94k unique email addresses. Also exposed were names, phone numbers and physical addresses. Exposed data: email addresses, names, phone numbers, physical addresses. The breach dates from Apr 8, 2020; Have I Been Pwned loaded it on Apr 22, 2020.
What to do
- If you had a Vianet account, change its password and the password of any other account that reused it.
- Turn on multi-factor authentication wherever it is offered.
- Check whether your addresses are in this breach at https://haveibeenpwned.com.
- Expect targeted phishing that quotes the leaked details; verify any unexpected contact out of band.
Sources
All live incidents on Threat Watch