Breach Disclosure: Appartoo
|by Alpha Team
In March 2017, Appartoo, a French flatsharing website, suffered a data breach. The website did not publish anything on their blog or released a statement about the breach. The company notified users in early 2017 about the incident. Approximately 50,000 rows of account data were leaked.
Recommendations
- If not already enabled, turn on the compromised credentials rule for all relevant entities and ensure relevant emails are entered for those entities, or reach out to [email protected] for assistance
- If one of your entities receives an alert ZeroFOX recommends immediate password changes for the affected account
- Enable 2-factor authentication for all of your organizational accounts to help mitigate phishing and credential stuffing attacks
- Remain alert to potential spear phishing attacks through email and social media.
Details
The breach contained the following data:
- Ages
- Authentication tokens
- Email addresses
- Employment statuses
- Genders
- IP addresses
- Martial status
- Names
- SHA-256 hashed passwords
- Physical addresses
- Private messages
- Social media profiles
Tags: technology, eu/russia, data breach