Home/Incidents/Gravatar

Gravatar

1 Dec 2021 · National · Technology
Data Breach HIGH ✓ Verified

What happened

Globally integrated user profile avatar provider Gravatar suffered a massive data scraping exploit. Attackers combined an API security loophole with user profile parameters to compile and leak a master database of 113,990,000 unique user emails and usernames.

Incident details

Organisation
Gravatar
Date
1 Dec 2021
Attack type
Data Breach
Severity
HIGH
Sector
Technology
State
National
Records affected
113990000
Threat actor
Unknown

Source

itnews.com.au ↗
← Back to all incidents