Breach Disclosure: Tout
|by Alpha Team
Tout Breach Advisory
On Saturday, January 25th information about a 2014 breach of a now-defunct social media site called Tout began circulating. The breach activity contains information that could give a bad actor the ability to pivot to other accounts because of password reuse.
Recommendations
- Enable 2-factor authentication for all of your organization accounts to help mitigate phishing and credential stuffing attacks
- If one of your entities receives an alert, ZeroFOX recommends immediate password changes for the affected account
- If not already enabled, turn on the compromised credentials rule for all relevant entities and ensure relevant emails are entered for those entities, or reach out to [email protected] for assistance
Details
In 2014 Tout suffered a data breach of 650k accounts. The method of the breach is not known. On January 25th, 2020 the breach data started circulating on forums that specialize in breach data.
The breach contains:
- Username
- Password hash in bcrypt
- Login IP of user
- Location of user
- Bio of user
Tags: communications, data breach, global