Wife Lovers data breach: 1.3M accounts exposed
Severity: high · Patch status: no-fix-needed · Since 2018-10-20
In October 2018, the site dedicated to posting naked photos and other erotica of wives Wife Lovers suffered a data breach. The underlying database supported a total of 8 different adult websites and contained over 1.2M unique email addresses. Wife Lovers acknowledged the breach which impacted names, usernames, email and IP addresses and passwords hashed using the weak DEScrypt algorithm. The breach has been marked as "sensitive" due to the nature of the site. Exposed data: email addresses, ip addresses, names, passwords, usernames. The breach dates from Oct 7, 2018; Have I Been Pwned loaded it on Oct 20, 2018.
What to do
- If you had a Wife Lovers account, change its password and the password of any other account that reused it.
- Turn on multi-factor authentication wherever it is offered.
- Check whether your addresses are in this breach at https://haveibeenpwned.com.
- Expect targeted phishing that quotes the leaked details; verify any unexpected contact out of band.
Sources
All live incidents on Threat Watch