Skip to content
Cyber Breaches
Search
Data breachResolved

CashCrate data breach (2016)

In June 2017, news broke that CashCrate had suffered a data breach exposing 6.8 million records. The breach of the cash-for-surveys site dated back to November 2016 and exposed names, physical addresses, email addresses and passwords stored in plain text for older accounts along with weak MD5…

Victim
CashCrate
records
6.8M
SectorRetail

Imported from Have I Been Pwned — pending editorial review and translation to French. The summary below is machine-extracted; consult the source for details.

In 2016-11-17, CashCrate was affected by a data breach. Approximately 6,844,490 accounts were exposed. In June 2017, news broke that CashCrate had suffered a data breach exposing 6.8 million records. The breach of the cash-for-surveys site dated back to November 2016 and exposed names, physical addresses, email addresses and passwords stored in plain text for older accounts along with weak MD5…

Sources

  1. haveibeenpwned.comhttps://haveibeenpwned.com/PwnedWebsites#CashCrate
  2. cashcrate.comhttps://cashcrate.com

Related incidents

Data breachResolved

Adult FriendFinder (2016) data breach (2016)

In October 2016, the adult entertainment company Friend Finder Networks suffered a massive data breach. The incident impacted multiple separate online assets owned by the company, the largest of which was the Adult FriendFinder website alleged to be "the world's largest sex & swinger community".

Victim
Adult FriendFinder (2016)
Records
169.7M
Data breachResolved

ClixSense data breach (2016)

In September 2016, the paid-to-click site ClixSense suffered a data breach which exposed 2.4 million subscriber identities. The breached data was then posted online by the attackers who claimed it was a subset of a larger data breach totalling 6.6 million records.

Victim
ClixSense
Records
2.4M
Data breachResolved

PPCGeeks data breach (2016)

In August 2016, the pocket PC fan site forum PPCGeeks suffered a data breach that exposed over 490k records. The breach of the vBulletin forum exposed email and IP addresses, usernames, dates of birth and passwords stored as salted MD5 hashes.

Victim
PPCGeeks
Records
492.5K
Data breachResolved

Cross Fire data breach (2016)

In August 2016, the Russian gaming forum known as Cross Fire (or cfire.mail.ru) was hacked along with a number of other forums on the Russian mail provider, mail.ru. The vBulletin forum contained 12.8 million accounts including usernames, email addresses and passwords stored as salted MD5 hashes.

Victim
Cross Fire
Records
12.9M