Wishbone (2020) data breach

The Wishbone (2020) breach happened on January 27, 2020 and exposed 9,705,172 accounts. 12 kinds of data were exposed.

Overview

Site

wishbone.io

Breach date

January 27, 2020

Recorded on

May 28, 2020

Accounts exposed

9,705,172

Exposed data

Auth tokens, Dates of birth, Email addresses, Genders, Geographic locations, IP addresses, Names, Passwords, Phone numbers, Profile photos, Social media profiles, Usernames

Risk score

91 out of 100

Risk based on the exposed data

This breach scores 91 out of 100. The score is driven mostly by Passwords, Auth tokens, Phone numbers.

Breaches from the same period

• Bhinneka (2020-01-27, 1,274,340 accounts)
• Ulmon (2020-01-26, 777,769 accounts)
• Mathway (2020-01-13, 25,692,862 accounts)

What affected users should do

• Change your Wishbone (2020) password, and also change it on any other service where you used the same password. You can create a new one with the password generator.
• Turn on two-factor authentication for your login.
• Phone numbers were exposed, so watch out for impersonation by text message or phone call.

Create a new password →