Back to Radar
ES

Eskimi

High

Eskimi's 2020 incident exposed 1.2M user records, including critical sensitive data.

Records exposed
1,197,620 records
Breach date
Breach Sep 25, 2020
Last update
Updated Jul 16, 2022

What data was exposed?

Fields reported as compromised in this breach record.

Dates of birthEmail addressesGendersGeographic locationsPasswordsUsernames

Why does this breach matter?

In-depth analysis of the breach and its implications.

In September 2020, the AdTech platform Eskimi encountered a data breach, compromising approximately 1,197,620 user records. Exposed data included sensitive information such as email addresses, usernames, dates of birth, genders, geographic locations, and passwords stored as unsalted MD5 hashes. This incident highlights critical vulnerabilities in data handling practices and the importance of secure password hashing methods.

Impact Analysis

Understanding the scope and consequences of this breach.

User Impact
Users may be at risk of credential theft, impersonation, and identity misuse or fraud.
Business Impact
Reputational damage to Eskimi and potential legal consequences due to data protection violations.
Affected Sectors
  • AdTech
  • Data Management
Geographic Impact
  • Global, as users come from various regions

What You Should Do

Recommended actions to take in response to this breach.

If You Were Affected

  • Replace all passwords that use the compromised credentials.
  • Monitor accounts associated with your email addresses for unauthorized activity.
  • Consider enabling multi-factor authentication for additional security.

Preventive Measures

  • Strongly hash stored passwords using modern cryptographic standards such as bcrypt or Argon2.
  • Implement rigorous data protection policies including regular security audits.
  • Educate users about increasing the complexity of their passwords and utilizing password managers.

Frequently Asked Questions

Common questions about this breach and what it means for you.

Exposed data includes usernames, email addresses, genders, geographic locations, dates of birth, and passwords hashed using unsalted MD5.