Skip to content
Cyber Breaches
Search
Data breachResolved

Xiaomi data breach (2012)

In August 2012, the Xiaomi user forum website suffered a data breach. In all, 7 million email addresses appeared in the breach although a significant portion of them were numeric aliases on the bbs_ml_as_uid.xiaomi.com domain.

Victim
Xiaomi
records
7.1M
SectorRetail
CountryChina

Imported from Have I Been Pwned — pending editorial review and translation to French. The summary below is machine-extracted; consult the source for details.

In 2012-08-01, Xiaomi was affected by a data breach. Approximately 7,088,010 accounts were exposed. In August 2012, the Xiaomi user forum website suffered a data breach. In all, 7 million email addresses appeared in the breach although a significant portion of them were numeric aliases on the bbs_ml_as_uid.xiaomi.com domain.

Sources

  1. haveibeenpwned.comhttps://haveibeenpwned.com/PwnedWebsites#Xiaomi
  2. xiaomi.cnhttps://xiaomi.cn

Related incidents

Data breachResolved

Yahoo data breach (2012)

In July 2012, Yahoo! had their online publishing service "Voices" compromised via a SQL injection attack. The breach resulted in the disclosure of nearly half a million usernames and passwords stored in plain text.

Victim
Yahoo
Records
453.4K
Data breachResolved

Dropbox data breach (2012)

In mid-2012, Dropbox suffered a data breach which exposed the stored credentials of tens of millions of their customers. In August 2016, they forced password resets for customers they believed may be at risk.

Victim
Dropbox
Records
68.6M
Data breachResolved

Last.fm data breach (2012)

In March 2012, the music website Last.fm was hacked and 43 million user accounts were exposed. Whilst Last.fm knew of an incident back in 2012, the scale of the hack was not known until the data was released publicly in September 2016.

Victim
Last.fm
Records
37.2M
Data breachResolved

Gamigo data breach (2012)

In March 2012, the German online game publisher Gamigo was hacked and more than 8 million accounts publicly leaked. The breach included email addresses and passwords stored as weak MD5 hashes with no salt.

Victim
Gamigo
Records
8.2M