ES

Eskimi

High

Eskimi's 2020 incident exposed 1.2M user records, including critical sensitive data.

1,197,620 recordsBreach Sep 25, 2020Updated Jul 16, 2022

Exposed data classes

Fields reported as compromised in this breach record.

Dates of birthEmail addressesGendersGeographic locationsPasswordsUsernames

Detailed Analysis

In-depth analysis of the breach and its implications.

In September 2020, the AdTech platform Eskimi encountered a data breach, compromising approximately 1,197,620 user records. Exposed data included sensitive information such as email addresses, usernames, dates of birth, genders, geographic locations, and passwords stored as unsalted MD5 hashes. This incident highlights critical vulnerabilities in data handling practices and the importance of secure password hashing methods.

Impact Analysis

Understanding the scope and consequences of this breach.

User Impact
Users may be at risk of credential theft, impersonation, and identity misuse or fraud.
Business Impact
Reputational damage to Eskimi and potential legal consequences due to data protection violations.
Affected Sectors
  • AdTech
  • Data Management
Geographic Impact
  • Global, as users come from various regions

What You Should Do

Recommended actions to take in response to this breach.

If You Were Affected

  • Replace all passwords that use the compromised credentials.
  • Monitor accounts associated with your email addresses for unauthorized activity.
  • Consider enabling multi-factor authentication for additional security.

Preventive Measures

  • Strongly hash stored passwords using modern cryptographic standards such as bcrypt or Argon2.
  • Implement rigorous data protection policies including regular security audits.
  • Educate users about increasing the complexity of their passwords and utilizing password managers.

Frequently Asked Questions

Common questions about this breach and what it means for you.

Exposed data includes usernames, email addresses, genders, geographic locations, dates of birth, and passwords hashed using unsalted MD5.

Osintly · Eskimi Data Breach Analysis