Yonéma data breach: what leaked and what to do
Yonéma (yonema.com) had a data breach on 2024-11-21 affecting 35,962 accounts. Passwords were involved.
!Passwords leaked
Added to the catalogue 14 Dec 2024.
What leaked
- Dates of birth
- Device information
- Email addresses
- IP addresses
- Names
- Passwords
- Phone numbers
What happened
In November 2024, data from the Senegalese payment platform Yonéma was posted to a popular hacking forum. The data included 36k unique email addresses alongside phone numbers, names and what appears to be encrypted passwords and dates of birth.
Description from Have I Been Pwned, in its words.
What to do
- Change the password on that service, and anywhere you used the same password. A password manager makes this painless.
- Turn on two-factor sign-in on that service and on your email.
- Warn staff: emails, texts or calls quoting leaked details are not proof the sender is genuine.
- If card or bank details leaked, watch statements and tell the bank; if identity documents leaked, consider a credit ban or alert.
Common questions
What leaked in the Yonéma breach?
Dates of birth, Device information, Email addresses, IP addresses, Names, Passwords, Phone numbers
When did the Yonéma breach happen?
The breach date is 2024-11-21; it was added to the public catalogue on 2024-12-14.
What should I do if my staff used this service?
Change the password there and anywhere it was reused, turn on two-factor sign-in, and warn staff about emails quoting the leaked details.
Was a staff address in this breach?
Check one address free, no storage. Breach Watch checks every staff address after each new breach.