CI
CityBee
MediumCityBee's 2021 breach exposed 110,156 users' personal data, including hashed passwords and IDs.
110,156 recordsBreach Feb 5, 2021Updated Feb 17, 2021
Exposed data classes
Fields reported as compromised in this breach record.
Email addressesGovernment issued IDsNamesPasswords
Detailed Analysis
In-depth analysis of the breach and its implications.
In February 2021, the Lithuanian car-sharing service CityBee experienced a data breach impacting approximately 110,156 customers. The exposed data included personal information such as names, email addresses, government-issued IDs, and passwords stored using unsalted SHA-1 hashing, a practice considered insecure against contemporary cyber threats.
Impact Analysis
Understanding the scope and consequences of this breach.
- User Impact
- Confidential information, including identities and secure access credentials, might have been exposed.
- Business Impact
- The breach impacted customer trust and potentially attracted regulatory scrutiny.
- Affected Sectors
- Transportation
- Data Privacy
- Geographic Impact
- Lithuania
- Europe
What You Should Do
Recommended actions to take in response to this breach.
If You Were Affected
- •Change passwords for accounts sharing credentials.
- •Enable multi-factor authentication for critical accounts.
- •Monitor accounts for unauthorized activity.
- •Consider ID protection services.
Preventive Measures
- •Utilize strong, unique passwords per service.
- •Educate on identifying phishing attempts.
- •Employ secure hashing of sensitive data.
- •Regularly audit data security protocols.
Frequently Asked Questions
Common questions about this breach and what it means for you.
Weak security practices, including the use of unsalted SHA-1 for password storage, contributed to the vulnerability.