Wishbone (2016) data breach

The Wishbone (2016) breach happened on August 7, 2016 and exposed 2,247,314 accounts. 7 kinds of data were exposed.

Overview

Site

wishbone.io

Breach date

August 7, 2016

Recorded on

March 15, 2017

Accounts exposed

2,247,314

Exposed data

Auth tokens, Dates of birth, Email addresses, Genders, Names, Phone numbers, Usernames

Risk score

71 out of 100

Risk based on the exposed data

This breach scores 71 out of 100. The score is driven mostly by Auth tokens, Phone numbers, Dates of birth.

Breaches from the same period

• Cross Fire (2016-08-08, 12,865,609 accounts)
• Пара Па (2016-08-08, 4,946,850 accounts)
• Unreal Engine (2016-08-11, 530,147 accounts)

What affected users should do

• Change your Wishbone (2016) password, and also change it on any other service where you used the same password. You can create a new one with the password generator.
• Turn on two-factor authentication for your login.
• Phone numbers were exposed, so watch out for impersonation by text message or phone call.

Create a new password →