Breach Disclosure: Zhenai

The 2011 breach of Zhenai, a popular dating website in China, was disclosed today. Databases containing over 5 million records related to login credentials were leaked. This includes usernames and passwords in plain text.

Recommendations

If not already enabled, turn on the compromised credentials rule for all relevant entities and ensure relevant emails are entered for those entities, or reach out to [email protected] for assistance
If one of your entities receives an alert, ZeroFOX recommends immediate password changes for the affected account
Enable 2-factor authentication for all of your organizational accounts to help mitigate phishing and credential stuffing attacks
Remain alert to potential spear phishing attacks through email and social media.

Details

A 2011 breach in popular Chinese dating site Zhenai was disclosed today. In December 2011, the Chinese Software Developer Network, or CSDN, was compromised, which ultimately lead to the leak of databases related to a number of different Chinese websites. Zhenai is one of these, with over 5 million records leaked. These records include plain text usernames and passwords.