Breach Disclosure: Tamodo

Tamodo experienced a data breach in February of this year, resulting in the loss of 495,000 records of users. This breach resulted in the exposure of names, email addresses, dates of birth and passwords stored as bcrypt hashes.

Recommendations

If not already enabled, turn on the compromised credentials rule for all relevant entities and ensure relevant emails are entered for those entities, or reach out to [email protected] for assistance
If one of your entities receives an alert, ZeroFOX recommends immediate password changes for the affected account
Enable 2-factor authentication for all of your organizational accounts to help mitigate phishing and credential stuffing attacks

Details

Tamodo is an affiliate network, that acts as a middleman between advertisers and publishers. Tamodo failed to respond to multiple attempts to report the breach via published communication channels.

Figure 1. RaidForums sale ad for Tamodo dump

While passwords were included in this breach, multiple users in the RaidForums post for this breach said the passwrods would be too hard to decrypt, which makes this slightly less appealing than others, however, there is still valuable information included in this dump.