Breach Disclosure: Flash Flash Revolution (again)

Breach Disclosure: Flash Flash Revolution

Flash Flash Revolution, a web based dance videogame, suffered yet another data breach. The first data breach by the website occurred in 2016. The breach was first posted and verified on forum RaidForums by user kuant on July 19 2019. The compromised data includes 2 million rows of usernames, email and IP addresses, passwords, dates of birth and profile data.

Recommendations

• If not already enabled, turn on the compromised credentials rule for all relevant entities and ensure relevant emails are entered for those entities, or reach out to [email protected] for assistance
• If one of your entities receives an alert, ZeroFOX recommends immediate password changes for the affected account
• Enable 2-factor authentication for all of your organizational accounts to help mitigate phishing and credential stuffing attacks
• Remain alert to potential spear phishing attacks through email and social media.

Details

RaidForums administrator Omnipotent moved the breach to the "Official" forum the same day. The post contained instructions on how to access the data:

The data provided is the users table from the vBulletin forum in SQL format so you'll need to keep that in mind for dehashing. The .7z File's MD5 Hash is 90A527A9E52CE202DACF433D98954FA6. Total record count of 2009423.