Breach Disclosure: Dueling Network

In early 2017, fansite DuelingNetwork suffered a data breach. The administrators of the website told Vice that the contents of their database were stolen from their website. The breach contains approximately 5.5 million rows of data, which include usernames, email addresses, MD5 hashed passwords and IP addresses.

Recommendations

If not already enabled, turn on the compromised credentials rule for all relevant entities and ensure relevant emails are entered for those entities, or reach out to [email protected] for assistance
If one of your entities receives an alert, ZeroFOX recommends immediate password changes for the affected account
Enable 2-factor authentication for all of your organizational accounts to help mitigate phishing and credential stuffing attacks

Details

An administrator for Dueling Network claims that a MySQL vulnerability was the impetus to the breach. Multiple sales of the breach on the dark web, as well as the aforementioned Vice article, put the number of rows anywhere between 5.5 million and 6.5 million.