You've Been Scraped data breach: what leaked and what to do
You've Been Scraped had a data breach on 2018-10-05 affecting 66,147,869 accounts.
!Personal data leaked
Added to the catalogue 7 Dec 2018.
What leaked
- Email addresses
- Employers
- Geographic locations
- Job titles
- Names
- Social media profiles
What happened
In October and November 2018, security researcher Bob Diachenko identified several unprotected MongoDB instances believed to be hosted by a data aggregator. Containing a total of over 66M records, the owner of the data couldn't be identified but it is believed to have been scraped from LinkedIn hence the title "You've Been Scraped". The exposed records included names, both work and personal email addresses, job titles and links to the individuals' LinkedIn profiles.
Description from Have I Been Pwned, in its words.
What to do
- Warn staff: emails, texts or calls quoting leaked details are not proof the sender is genuine.
- If card or bank details leaked, watch statements and tell the bank; if identity documents leaked, consider a credit ban or alert.
- Turn on two-factor sign-in on that service and on your email.
Common questions
What leaked in the You've Been Scraped breach?
Email addresses, Employers, Geographic locations, Job titles, Names, Social media profiles
When did the You've Been Scraped breach happen?
The breach date is 2018-10-05; it was added to the public catalogue on 2018-12-06.
What should I do if my staff used this service?
Warn staff about emails, texts and calls quoting the leaked details, and watch for sign-in attempts on the services they use.
Was a staff address in this breach?
Check one address free, no storage. Breach Watch checks every staff address after each new breach.