Breach Disclosure: Mathway

In January 2020, math problem solving forum Mathway experienced a data breach involving over 17 million records. Breached data includes full names, Google and Facebook IDs, email addresses and salted password hashes.

Recommendations

Enable 2-factor authentication for all of your organizational accounts to help mitigate phishing and credential stuffing attacks
If not already enabled, turn on the compromised credentials rule for all relevant entities and ensure relevant emails are entered for those entities, or reach out to [email protected] for assistance
If one of your entities receives an alert, ZeroFOX recommends immediate password changes for the affected account

Details

The data involved in this breach has been circulated on various hacking forums since May 2020. Initially, the price of this breach was higher than average, however, in recent weeks this price has dropped. This is likely because some forum members who obtained the breach are reselling the data at a lower price.

Figure 1: Database available for sale on a hacking forum