Breach Disclosure: GeniusU

GeniusU, the "Entepreneur Success Platform" experienced a data breach in October 2020, resulting in the exposure of 1.3 million user accounts. This data included names, email address, IP address, gender, social media profile links, and bcrypt password hashes. This breach has been attributed to ShinyHunters, which continue to release their breach data for free, which are typically after any sales of the data have been made.

Recommendations

Enable 2-factor authentication for all of your organizational accounts to help mitigate phishing and credential stuffing attacks
If not already enabled, turn on the compromised credentials rule for all relevant entities and ensure relevant emails are entered for those entities, or reach out to [email protected] for assistance
If one of your entities receives an alert, ZeroFOX recommends immediate password changes for the affected account

Details

Reportedly breached on 2 October 2020, a user by the name of "Hater" posted the breached data for users to download on Raidforums on 12 November 2020.

Figure 1: Raidforums posting of GeniusU breach data

This breach was part of a larger ShinyHunters effort which included sites such as Animal Jam, Eatigo, Peatix, Redmart, Pluto.tv, Storybird, Homechef, and many others.