Turns out the 500px data breach we reported on last week wasn’t an isolated incident. According to The Register the data breach affected not only 500px but a total of 16 websites, including mobile image sharing platform EyeEm, Animoto, Artsy and Fotolog.
Overall the details of 617 million online accounts were stolen and offered for sale on the dark web.
EyeEm sent an email out to its user base, saying 22 million of its accounts had been compromised but no payment or payout data had been affected. The breach exposed users’ names, email addresses, and encrypted versions of passwords, however.
The company also writes that it only recently become aware of the hack, despite the fact that it happened back on July 5th 2018. Upon discovery of the issue all passwords were disabled and emails went out to the EyeEm community.
EyeEm also asks its users to not reuse old passwords, not use the same password on multiple websites, use multi-factor authentication whenever possible and use as password management tool. This is sensible advice, no matter if you’re affected by any of the hacks or not.
Articles: Digital Photography Review (dpreview.com)