SHARE
Details of more the 2.28 million users of dating site MeetMindful have been released online for free in the latest in a series of stolen data dumps.
The stolen data includes real names, email addresses, address information, body details, dating preferences, marital status, birth data, location data, IP addresses, Bcrypt-hashed passwords, Facebook user IDs and Facebook authentication tokens. The inclusion of Facebook authentication tokens is particularly notable because it could potentially give access to the Facebook accounts of MeetMindful members in the database.
MeetMindful has not publicly addressed either the theft of its user data or its publication online.
ZDNet first reported the news today, saying only that the data was released by a “well-known hacker” as “a free download on a publicly accessible hacking forum known for its trade in hacked databases.” SiliconANGLE can confirm the data in question was released by ShinyHunters Jan. 20 and the forum was Raid
A notorious threat actor appears to have published 1.9 million user records for the popular online photo editing site Pixlr, putting customers at risk of follow-on attacks.
“ShinyHunters” dumped the files over the weekend for free on an underground forum, claiming the site was breached at the same time as 123RF, which is owned by the same company, Inmagine.
Among the data up for grabs are email addresses, usernames, hashed passwords and users’ countries.
So far there’s been no word from the firm itself, despite the fact that these users could be at risk of phishing attacks, credential stuffing attempts and other fraud if not informed promptly.