1. Mangatoon

https://twitter.com/cyberEyesLive/status/1546449607932133376?s=20&t=pCJY_ITqwhE8lAI7YhwZ_Q

https://www.bleepingcomputer.com/news/security/mangatoon-data-breach-exposes-data-from-23-million-accounts/

Mangatoon data breach exposes data from 23 million accounts
By Lawrence Abrams

    July 9, 2022 

1.1. history

"Mangatoon had 23M accounts breached in May. 
The breach exposed names, email addresses, genders, social media account identities,
auth tokens from social logins and salted MD5 password hashes," tweeted the HIBP account.

The data breach was conducted by a well-known hacker named "pompompurin," who said they stole the database from an Elasticsearch server that was using weak credentials.

"It was ES, they had credentials on it but it was just "password", they changed the credentials after I emailed telling them but they never notified their customers and never replied," pompompurin told BleepingComputer.

CategoryDns CategoryWatch CategoryTemplate