Back to Radar
ST

StarTribune

High

In 2019, StarTribune experienced a data breach exposing 2M+ sensitive records, impacting users' personal data security.

Records exposed
2,192,857 records
Breach date
Breach Oct 10, 2019
Last update
Updated Oct 31, 2020

What data was exposed?

Fields reported as compromised in this breach record.

Dates of birthEmail addressesGendersNamesPasswordsPhysical addressesUsernames

Why does this breach matter?

In-depth analysis of the breach and its implications.

In October 2019, the Minnesota-based news organization StarTribune experienced a data breach that was later discovered being sold on an underground forum. This breach resulted in the exposure of 2,192,857 records, which included sensitive details such as email addresses, names, usernames, physical addresses, dates of birth, genders, and bcrypt-hashed passwords. The breach underscores the importance of safeguarding sensitive personal information, even when stored in hashed formats.

Impact Analysis

Understanding the scope and consequences of this breach.

User Impact
Exposed passwords, even if hashed, risk user accounts through potential cracking or credential stuffing.
Business Impact
This breach likely damaged customer trust and required investment in improved cybersecurity measures.
Affected Sectors
  • Media
Geographic Impact
  • United States

What You Should Do

Recommended actions to take in response to this breach.

If You Were Affected

  • Immediately update passwords for all accounts using similar credentials as breached.
  • Monitor email and account activity for unauthorized changes or access.
  • Enable Two-Factor Authentication (2FA) on all services when available.

Preventive Measures

  • Create unique, complex passwords for each online account.
  • Regularly update and monitor security practices, including periodic updates to hashing algorithms.
  • Educate users on detecting phishing and other social engineering tactics.

Frequently Asked Questions

Common questions about this breach and what it means for you.

Change your passwords immediately and monitor your accounts for irregular activity.