No Invitation Required: Hackers Can Phish Evite Users

guest · Jun 11, 2019

No Invitation Required: Hackers Can Phish Evite Users
Social-Planning Website Says Pre-2014 User Database Has Been Stolen
June 11, 2019
https://www.inforisktoday.com/blogs/no-invitation-required-hackers-phish-evite-users-p-2754

Online invitation site Evite says it was hacked and information on an unspecified number of users was stolen. Although the breach appears to have happened between Feb. 22 and May 14, the stolen information dates from 2013 and before.

Founded in 1998, Los Angeles-based Evite is a social-planning website that allows users to create, send and manage online invitations.
"Potentially affected information could include names, usernames, email addresses, passwords and, if optionally provided to us, dates of birth, phone numbers and mailing addresses," Evite says in its data breach notification.

"We continue to monitor our systems for unauthorized access, have introduced additional security measures, and will be prompting affected Evite users to reset their Evite passwords on their next log-in," it adds.
Click to expand...

guest · Jul 16, 2019

Evite Invites Over 100 Million People to Their Data Breach
July 15, 2019
https://www.bleepingcomputer.com/ne...over-100-million-people-to-their-data-breach/

The data breach monitoring service Haveibeenpwned.com has added a database dump of almost 101 million Evite users who had their information exposed when attackers gained unauthorized access to their servers.
In May 2019 [...] At the time, it was thought that approximately 10 million users had their information exposed as an Evite database with that amount was being sold on an online underground marketplace by a person named "gnosticplayers".

According to a database received by Have I Been Pwned, the amount of exposed users is allegedly much larger. HIBP states that the database they received consists of 100,985,047 unique Evite users, with the data exposed being the same as what was disclosed in the original breach notification.

Due to the large amount of exposed users, anyone who has an Evite account is advised to change their password. Furthermore, if you use that same password at other sites, you should change it there as well to prevent them being used in credential stuffing attacks.
Click to expand...

Log in or Sign up

No Invitation Required: Hackers Can Phish Evite Users

guest Guest

guest Guest

Log in or Sign up

No Invitation Required: Hackers Can Phish Evite Users

guest Guest

guest Guest

Useful Searches