Zoosk (2020) data breach: what leaked and what to do
Zoosk (2020) (zoosk.com) had a data breach on 2020-01-12 affecting 23,927,853 accounts.
!Personal data leaked !Sensitive
Added to the catalogue 7 Aug 2020.
What leaked
- Dates of birth
- Drinking habits
- Education levels
- Email addresses
- Ethnicities
- Family structure
- Genders
- Geographic locations
- Income levels
- Names
- Nicknames
- Physical attributes
- Political views
- Relationship statuses
- Religions
- Sexual orientations
- Smoking habits
What happened
In January 2020, the online dating service Zoosk suffered a data breach which was subsequently shared extensively across online hacking communities. The breach contained 24 million unique email addresses alongside extensive personal information including genders, sexualities, dates of birth, physical attributes such as height and weight, religions, ethnicities and political views. The breach also allegedly exposed MD5 password hashes, although the data circulating in hacking circles had this field nulled out. The breach was provided to HIBP by breachbase.pw.
Description from Have I Been Pwned, in its words.
What to do
- Warn staff: emails, texts or calls quoting leaked details are not proof the sender is genuine.
- If card or bank details leaked, watch statements and tell the bank; if identity documents leaked, consider a credit ban or alert.
- Turn on two-factor sign-in on that service and on your email.
Common questions
What leaked in the Zoosk (2020) breach?
Dates of birth, Drinking habits, Education levels, Email addresses, Ethnicities, Family structure, Genders, Geographic locations, Income levels, Names, Nicknames, Physical attributes, Political views, Relationship statuses, Religions, Sexual orientations, Smoking habits
When did the Zoosk (2020) breach happen?
The breach date is 2020-01-12; it was added to the public catalogue on 2020-08-07.
What should I do if my staff used this service?
Warn staff about emails, texts and calls quoting the leaked details, and watch for sign-in attempts on the services they use.
Was a staff address in this breach?
Check one address free, no storage. Breach Watch checks every staff address after each new breach.