Breach Disclosure: Mindjolt

On or around April 2019, gaming platform Mindjolt suffered a data breach that resulted in loss of 28 million rows of player information. This breach was the result of actor gnosticplayers who has been responsible for breaches within the last year, with big names like UnderArmor and ShareThis being on their victim list. This specific breach is part of "Round 5" of gnosticplayers postings of breaches, and was originally posted on Dream Market until it was taken down earlier this year. The breach contained emails, names, birth days, gaming details but no password data.

Recommendations

If not already enabled, turn on the compromised credentials rule for all relevant entities and ensure relevant emails are entered for those entities, or reach out to [email protected] for assistance
If one of your entities receives an alert, ZeroFOX recommends immediate password changes for the affected account
Enable 2-factor authentication for all of your organizational accounts to help mitigate phishing and credential stuffing attacks
Remain alert to potential spear phishing attacks through email and social media.

Details

"Round 5" contained breach postings of approximately 6 vendors. At time of postings, gnosticplayers was charging 0.1008 bitcoin for the breach, which at that time was $549.82 USD. The breach did not contain password details, but did contain an impressive e-mail list which can be used for targeting and spam.