Back to Radar
ST

Staminus

Medium

Staminus DDoS protection services suffered a data breach in 2016, exposing customer credentials and sensitive data.

Records exposed
26,815 records
Breach date
Breach Mar 11, 2016
Last update
Updated Oct 5, 2017

What data was exposed?

Fields reported as compromised in this breach record.

Credit cardsEmail addressesIP addressesPasswordsSupport ticketsUsernames

Why does this breach matter?

In-depth analysis of the breach and its implications.

In March 2016, Staminus, a provider specializing in DDoS protection services, experienced a significant data breach leading to a prolonged outage and the exposure of approximately 27,000 records, including sensitive customer information such as email addresses, credit card details, and unsalted MD5 hashed passwords. Following the breach, the data were publicly disclosed, underscoring critical vulnerabilities in their data handling practices. Post-breach, the entity ceased operations, reflecting the severe fallout of the incident.

Impact Analysis

Understanding the scope and consequences of this breach.

User Impact
Users faced potential risk from exposed passwords and payment card information, requiring immediate security measures.
Business Impact
The breach forced operational cessation, highlighting reputational and financial devastation from inadequate security measures.
Affected Sectors
  • Technology
  • Cybersecurity
Geographic Impact
  • Global

What You Should Do

Recommended actions to take in response to this breach.

If You Were Affected

  • Change passwords associated with possibly implicated accounts.
  • Monitor financial accounts for unauthorized charges.
  • Consider identity monitoring services if sensitive data was exposed.

Preventive Measures

  • Utilize secure hashing methods like bcrypt for password storage.
  • Conduct regular security audits and penetration testing.
  • Implement layered security protocols to combat various attack vectors.

Frequently Asked Questions

Common questions about this breach and what it means for you.

Exposed records included email addresses, payment card details, hashed passwords, usernames, IP addresses, and support tickets.