Data breach
000Webhost.com data breach
In 2015, 000Webhost.com suffered a data breach affecting 12,456,893 records. Exposed data included names, surname, email addresses and 4 other types of data.
Breach date
12.5 million
Records in the breach
7
Types of data exposed
Were you affected by the 000Webhost.com breach?
Enter your email address to see whether it appears in this breach — or any of the other breaches in Leak Database.
Data exposed in the 000Webhost.com breach
- Names
- Surname
- Email Addresses
- Usernames
- Passwords
- IP Addresses
- FTP Passwords
About the breach
The 000webhost data breach occurred around March 2015 (and was publicly disclosed in October 2015) when the free web hosting provider suffered a major security incident via an outdated PHP exploit.
Key Details of the Breach
• Records Exposed: Approximately 13.5 to 15 million user records (roughly 14.9 million accounts).
• Compromised Data:
• Email addresses
• Plaintext / unencrypted passwords
• Usernames and names
• IP addresses (>15.1 million)
• FTP passwords
• Cause: An insecure system vulnerability / login flaw that allowed unauthorized access and data extraction.
Key Details of the Breach
• Records Exposed: Approximately 13.5 to 15 million user records (roughly 14.9 million accounts).
• Compromised Data:
• Email addresses
• Plaintext / unencrypted passwords
• Usernames and names
• IP addresses (>15.1 million)
• FTP passwords
• Cause: An insecure system vulnerability / login flaw that allowed unauthorized access and data extraction.
How to protect yourself
In order to start protecting yourself from possible fraud in future, we highly recommend the following steps:
1. Immediately change your password on the affected website, but also any other website where you may re-use this password.
2. Download the Google or Microsoft Authenticator App on your mobile device. Activate 2FA authentication on any website you use, which allow for it.
3. Consider call identification apps on your mobile device, such as True Caller, which could assist in identifying possible scam calls.
1. Immediately change your password on the affected website, but also any other website where you may re-use this password.
2. Download the Google or Microsoft Authenticator App on your mobile device. Activate 2FA authentication on any website you use, which allow for it.
3. Consider call identification apps on your mobile device, such as True Caller, which could assist in identifying possible scam calls.
Get told about the next breach
A free Leak Database account emails you when your address appears in a newly added breach.