Breach Disclosure: Pluto TV

Pluto TV, an American internet television service owned by ViacomCBS, was breached in 2018 which impacted nearly 3.2 million user accounts. This breach took place in 2018 and is now becoming available for users to download on popular hacking forums and was hacked and distributed by the hacking group ShinyHunters.

Recommendations

Enable 2-factor authentication for all of your organizational accounts to help mitigate phishing and credential stuffing attacks
If not already enabled, turn on the compromised credentials rule for all relevant entities and ensure relevant emails are entered for those entities, or reach out to [email protected] for assistance
If one of your entities receives an alert, ZeroFOX recommends immediate password changes for the affected account

Details

Pluto TV was breached in late 2018, with the data just now becoming available. According to an article by BleepingComputer, this breach appears to be two years old, with the latest record created on October 12th, 2018. The cyberattack on Pluto TV resulted in the exposure of more than 3.2 million user accounts, which are now available for free on various hacking forums. According to the sample data posted on RaidForums, the exposed information includes:

Usernames
Email addresses
Bcrypt hashed passwords
Birthdays
Device platforms
IP addresses

Figure 1: Screenshot of the post selling leaked Pluto TV data on a popular hacker forum.