Back to Radar
CI

CityBee

Medium

CityBee's 2021 breach exposed 110,156 users' personal data, including hashed passwords and IDs.

Records exposed
110,156 records
Breach date
Breach Feb 5, 2021
Last update
Updated Feb 17, 2021
Source

What data was exposed?

Fields reported as compromised in this breach record.

Email addressesGovernment issued IDsNamesPasswords

Why does this breach matter?

In-depth analysis of the breach and its implications.

In February 2021, the Lithuanian car-sharing service CityBee experienced a data breach impacting approximately 110,156 customers. The exposed data included personal information such as names, email addresses, government-issued IDs, and passwords stored using unsalted SHA-1 hashing, a practice considered insecure against contemporary cyber threats.

Impact Analysis

Understanding the scope and consequences of this breach.

User Impact
Confidential information, including identities and secure access credentials, might have been exposed.
Business Impact
The breach impacted customer trust and potentially attracted regulatory scrutiny.
Affected Sectors
  • Transportation
  • Data Privacy
Geographic Impact
  • Lithuania
  • Europe

What You Should Do

Recommended actions to take in response to this breach.

If You Were Affected

  • •Change passwords for accounts sharing credentials.
  • •Enable multi-factor authentication for critical accounts.
  • •Monitor accounts for unauthorized activity.
  • •Consider ID protection services.

Preventive Measures

  • •Utilize strong, unique passwords per service.
  • •Educate on identifying phishing attempts.
  • •Employ secure hashing of sensitive data.
  • •Regularly audit data security protocols.

Frequently Asked Questions

Common questions about this breach and what it means for you.

Weak security practices, including the use of unsalted SHA-1 for password storage, contributed to the vulnerability.