Z-lib data breach: what leaked and what to do
Z-lib (z-lib.is) had a data breach on 2024-06-20 affecting 9,737,374 accounts. Passwords were involved.
!Passwords leaked
Added to the catalogue 4 Nov 2024.
What leaked
- Cryptocurrency wallet addresses
- Email addresses
- Geographic locations
- Passwords
- Purchases
- Usernames
What happened
In June 2024, almost 10M user records from Z-lib were discovered exposed online. Now defunct, Z-lib was a malicious clone of Z-Library, a well-known shadow online platform for pirating books and academic papers. The exposed data included usernames, email addresses, countries of residence, Bitcoin and Monero cryptocurrency wallet addresses, purchases and bcrypt password hashes.
Description from Have I Been Pwned, in its words.
What to do
- Change the password on that service, and anywhere you used the same password. A password manager makes this painless.
- Turn on two-factor sign-in on that service and on your email.
- Warn staff: emails, texts or calls quoting leaked details are not proof the sender is genuine.
- If card or bank details leaked, watch statements and tell the bank; if identity documents leaked, consider a credit ban or alert.
Common questions
What leaked in the Z-lib breach?
Cryptocurrency wallet addresses, Email addresses, Geographic locations, Passwords, Purchases, Usernames
When did the Z-lib breach happen?
The breach date is 2024-06-20; it was added to the public catalogue on 2024-11-04.
What should I do if my staff used this service?
Change the password there and anywhere it was reused, turn on two-factor sign-in, and warn staff about emails quoting the leaked details.
Was a staff address in this breach?
Check one address free, no storage. Breach Watch checks every staff address after each new breach.