Breach Disclosure: Evite

In June 2019, social-planning website Evite posted an advisory related to a "Data Incident" affecting their platform. The specific posting detailed an "unauthorized access" to their systems in April 2019. The incident resulted in an unauthorized user downloading an "inactive data storage file" associated with Evite user accounts. The company specifically said that user information past 2013 was contained in the file. This data file was then subsequently sold in "Round 5" of well-known data fencer gnosticplayers on DreamMarket.

Recommendations

If not already enabled, turn on the compromised credentials rule for all relevant entities and ensure relevant emails are entered for those entities, or reach out to [email protected] for assistance
If one of your entities receives an alert, ZeroFOX recommends immediate password changes for the affected account
Enable 2-factor authentication for all of your organizational accounts to help mitigate phishing and credential stuffing attacks
Remain alert to potential spear phishing attacks through email and social media.

Details

101 million unique e-mail addresses were breached within this data trove. The file also contained name names, phone numbers, dates of birth and plain text passwords. gnosticplayers advertised the trove for download on the now defunct DreamMarket for 0.2419 bitcoin, around 1900 USD in April 2019.