You've Been Scraped data breach: 66.1M accounts exposed
Severity: high · Patch status: no-fix-needed · Since 2018-12-06
In October and November 2018, security researcher Bob Diachenko identified several unprotected MongoDB instances believed to be hosted by a data aggregator. Containing a total of over 66M records, the owner of the data couldn't be identified but it is believed to have been scraped from LinkedIn hence the title "You've Been Scraped". The exposed records included names, both work and personal email addresses, job titles and links to the individuals' LinkedIn profiles. Exposed data: email addresses, employers, geographic locations, job titles, names, social media profiles. The breach dates from Oct 5, 2018; Have I Been Pwned loaded it on Dec 6, 2018.
What to do
- If you had a You've Been Scraped account, change its password and the password of any other account that reused it.
- Turn on multi-factor authentication wherever it is offered.
- Check whether your addresses are in this breach at https://haveibeenpwned.com.
Sources
All live incidents on Threat Watch