Back to Radar
SU

SurveyLama

High

A February 2024 breach at SurveyLama exposed sensitive user data, impacting 4.4M accounts.

Records exposed
4,426,879 records
Breach date
Breach Feb 1, 2024
Last update
Updated Apr 2, 2024

What data was exposed?

Fields reported as compromised in this breach record.

Dates of birthEmail addressesIP addressesNamesPasswordsPhone numbersPhysical addresses

Why does this breach matter?

In-depth analysis of the breach and its implications.

In February 2024, SurveyLama, an online platform dedicated to facilitating paid surveys, experienced a data breach affecting approximately 4.4 million user accounts. The exposed information included sensitive personal data such as names, email addresses, IP addresses, physical addresses, phone numbers, dates of birth, and passwords secured by salted hashes (SHA-1, bcrypt, and Argon2). SurveyLama responded by notifying affected individuals via email to provide awareness and guidance.

Impact Analysis

Understanding the scope and consequences of this breach.

User Impact
Individuals face risks of targeted phishing, fraud, and identity theft.
Business Impact
SurveyLama's reputation and trustworthiness may come into question, coupled with potential financial and compliance liabilities.
Affected Sectors
  • Marketing
  • Research Services
Geographic Impact
  • Global

What You Should Do

Recommended actions to take in response to this breach.

If You Were Affected

  • Change passwords immediately on affected accounts.
  • Monitor accounts for unauthorized access.
  • Enable multifactor authentication where applicable.
  • Beware of phishing emails and scams leveraging compromised data.

Preventive Measures

  • Avoid using identical passwords across different platforms.
  • Regularly update passwords and verify secure storage options.
  • Ensure emails from service providers are verified before action is taken.

Frequently Asked Questions

Common questions about this breach and what it means for you.

Exposed data includes names, email addresses, dates of birth, phone numbers, IP addresses, physical addresses, and hashed passwords.