Data breach
KickStarter.com data breach
In 2014, KickStarter.com suffered a data breach affecting 5,169,947 records. Exposed data included usernames, email addresses, addresses and 2 other types of data.
Breach date
5.2 million
Records in the breach
5
Types of data exposed
Were you affected by the KickStarter.com breach?
Enter your email address to see whether it appears in this breach — or any of the other breaches in Leak Database.
Data exposed in the KickStarter.com breach
- Usernames
- Email Addresses
- Addresses
- Phone Numbers
- Encrypted Passwords
About the breach
A major data breach affecting Kickstarter occurred on February 15–16, 2014, after law enforcement alerted the company to unauthorized access.
Key Details of the Breach
• Affected Users: Approximately 5.2 million user records were exposed.
• Compromised Data: Usernames, email addresses, mailing addresses, phone numbers, and encrypted passwords (using SHA-1 or bcrypt).
• Unaffected Data: No credit card numbers or financial payment data were accessed or stored by hackers.
• Company Response: Kickstarter immediately closed the security vulnerability, invalidated older passwords, reset Facebook login tokens, and added modern security measures (such as two-factor authentication options).
Key Details of the Breach
• Affected Users: Approximately 5.2 million user records were exposed.
• Compromised Data: Usernames, email addresses, mailing addresses, phone numbers, and encrypted passwords (using SHA-1 or bcrypt).
• Unaffected Data: No credit card numbers or financial payment data were accessed or stored by hackers.
• Company Response: Kickstarter immediately closed the security vulnerability, invalidated older passwords, reset Facebook login tokens, and added modern security measures (such as two-factor authentication options).
How to protect yourself
In order to start protecting yourself from possible fraud in future, we highly recommend the following steps:
1. Immediately change your password on the affected website, but also any other website where you may re-use this password.
2. Download the Google or Microsoft Authenticator App on your mobile device. Activate 2FA authentication on any website you use, which allow for it.
3. Consider call identification apps on your mobile device, such as True Caller, which could assist in identifying possible scam calls.
1. Immediately change your password on the affected website, but also any other website where you may re-use this password.
2. Download the Google or Microsoft Authenticator App on your mobile device. Activate 2FA authentication on any website you use, which allow for it.
3. Consider call identification apps on your mobile device, such as True Caller, which could assist in identifying possible scam calls.
Get told about the next breach
A free Leak Database account emails you when your address appears in a newly added breach.