1. Mangatoon
https://twitter.com/cyberEyesLive/status/1546449607932133376?s=20&t=pCJY_ITqwhE8lAI7YhwZ_Q
Mangatoon data breach exposes data from 23 million accounts
By Lawrence Abrams
July 9, 2022
1.1. history
"Mangatoon had 23M accounts breached in May. The breach exposed names, email addresses, genders, social media account identities, auth tokens from social logins and salted MD5 password hashes," tweeted the HIBP account.
The data breach was conducted by a well-known hacker named "pompompurin," who said they stole the database from an Elasticsearch server that was using weak credentials. "It was ES, they had credentials on it but it was just "password", they changed the credentials after I emailed telling them but they never notified their customers and never replied," pompompurin told BleepingComputer.