Void.to data breach: 95K accounts exposed
Severity: high · Patch status: no-fix-needed · Since 2019-09-11
In June 2019, the hacking website Void.to suffered a data breach. There were 95k unique email addresses spread across 86k forum users and other tables in the database. A rival hacking website claimed responsibility for breaching the MyBB based forum which disclosed email and IP addresses, usernames, private messages and passwords stored as either salted MD5 or bcrypt hashes. Exposed data: email addresses, ip addresses, passwords, private messages, usernames. The breach dates from Jun 13, 2019; Have I Been Pwned loaded it on Sep 11, 2019.
What to do
- If you had a Void.to account, change its password and the password of any other account that reused it.
- Turn on multi-factor authentication wherever it is offered.
- Check whether your addresses are in this breach at https://haveibeenpwned.com.
- Expect targeted phishing that quotes the leaked details; verify any unexpected contact out of band.
Sources
All live incidents on Threat Watch
