Breach Disclosure: YouNow

Live streaming site YouNow experienced a data breach in Febrauary 2019. Breached information includes names, usernames, IP addresses, and profile data. This data was offered for sale on the dark web marketplace Dream Market, in conjunction with breach data from several other sites.

Recommendations

If not already enabled, turn on the compromised credentials rule for all relevant entities and ensure relevant emails are entered for those entities, or reach out to [email protected] for assistance
If one of your entities receives an alert, ZeroFOX recommends immediate password changes for the affected account
Enable 2-factor authentication for all of your organizational accounts to help mitigate phishing and credential stuffing attacks
Remain alert to potential spear phishing attacks through email and social media.

Details

Live streaming site YouNow experienced a data breach of over 40 million records (1.3 GB total) in February 2018. Exposed information included names, IP and email addresses, and user profiles. Passwords and payment information were not compromised, because YouNow uses third parties for login and payment methods. This data was offered for sale as a bundle with several other breach databases, in round two of the gnosticplayers breach sales. Gnosticplayers, a hacker and breach dump seller, offered five rounds of breached databases for sale on Dream Market between February and April 2019. These breaches totaled 932 million user records from 44 companies. This particular round of breach data was priced at $14,500.