123RF 123rf.com 123RF data breach: what happened and what to do
In March 2020 the stock photo site 123RF had a data breach that affected over 8 million subscribers: email, IP and physical addresses, names, phone numbers, usernames and passwords stored as MD5 hashes. The data was sold online.
View all 13,115 breaches- Breach date
- 22 Mar 2020
- Affected
- 8,661,578
- Data exposed
- Email addresses, IP addresses, Names, Passwords, Phone numbers, Physical addresses, Usernames
- Verified
- Yes
- Last updated
Source: Have I Been Pwned (CC BY 4.0)
123RF, a stock photo and image site, had a data breach in March 2020. Have I Been Pwned (HIBP) counts about 8.7 million accounts.
What happened
The data was sold online. 123RF told users and authorities that its database had been accessed through its data center and that membership data was copied. The company said the most recent data appeared to have left its systems on 22 March 2020.
What was exposed
HIBP lists email addresses, IP addresses, physical addresses, names, phone numbers, usernames and passwords stored as MD5 hashes. MD5 is a weak method that makes common passwords quick to crack, so assume yours could be known.
What it means for you
If you reused your 123RF password, other accounts are at risk, and the quickest fix is a new password in each place. The name, address and phone number combination is also useful to scammers. Be careful with emails or calls about subscriptions and invoices.
How to check your exposure
Search your email address on Have I Been Pwned, which holds this dataset and lets you look up an address for free. If it appears, change the password on every account that shared it and turn on two-factor login. Keep an eye out for unexpected messages about invoices or subscription renewals.
What to do if you were in it
- 1
Change your password and turn on 2FA
Set a new, unique password for 123RF. If you used that password anywhere else, change it there too, and turn on two-factor login on your important accounts. A password manager makes unique passwords easy.
- 2
Expect phishing and text scams that mention the breach
Treat unexpected emails, calls and texts that use your name, phone number or address with suspicion. Don't click links in them. Go to the company's site by typing the address yourself.
- 3
Check whether your email or phone is in this and other breaches
Run a free Serus scan. Serus monitors breach databases and the dark web and alerts you when your data shows up, so you hear about new exposures early. It can't remove data from a breach, which is why the steps above matter.
Frequently asked
Was I affected by the 123RF breach?
Check your email on Have I Been Pwned. If 123RF is listed, you were in the data.
What was exposed?
Email and IP addresses, physical addresses, names, phone numbers, usernames and MD5-hashed passwords.
Should I change my password?
Yes, on 123RF and anywhere you reused it. Turn on 2FA where it's offered.
Sources
Something wrong or out of date? Tell us and we'll re-check it.
