YouNow data breach: 18.2M accounts exposed
Severity: medium · Patch status: no-fix-needed · Since 2019-07-18
In February 2019, data from the live broadcasting service YouNow appeared for sale on a dark web marketplace. Whilst it's not clear what date the actual breach occurred on, the impacted data included 18M unique email addresses, IP addresses, names, usernames and links to social media profiles. As authentication is performed via social providers, no passwords were exposed in the breach. Many records didn't have associated email addresses thus the unique number is lower than the reported total number of accounts. Exposed data: email addresses, ip addresses, names, social media profiles, usernames. The breach dates from Feb 15, 2019; Have I Been Pwned loaded it on Jul 18, 2019.
What to do
- If you had a YouNow account, change its password and the password of any other account that reused it.
- Turn on multi-factor authentication wherever it is offered.
- Check whether your addresses are in this breach at https://haveibeenpwned.com.
Sources
All live incidents on Threat Watch