Daily Quiz dailyquiz.me Daily Quiz data breach: what happened and what to do
In January 2021 the quiz site Daily Quiz suffered a breach that exposed over 8 million unique email addresses, plus usernames, IP addresses and passwords stored in plain text. Have I Been Pwned added it in May 2021.
View all 13,115 breaches- Breach date
- 13 Jan 2021
- Affected
- 8,032,404
- Data exposed
- Email addresses, IP addresses, Passwords, Usernames
- Verified
- Yes
- Last updated
Source: Have I Been Pwned (CC BY 4.0)
Daily Quiz is a quiz website. In January 2021 it suffered a data breach, and Have I Been Pwned (HIBP), the breach notification service run by security researcher Troy Hunt, added it to its database in May 2021. HIBP counts 8,032,404 affected accounts.
What happened
HIBP's entry says the breach exposed over 8 million unique email addresses. The data came out in January 2021. HIBP doesn't say how the breach happened.
What was exposed
The data includes email addresses, usernames, IP addresses and passwords. HIBP notes the passwords were stored in plain text, meaning anyone holding the data could read them without cracking anything.
That matters most if you reuse passwords. Criminals run leaked email and password pairs against other sites, a tactic called credential stuffing, and a plain-text password works on the first try. An email address also makes you a target for phishing, and the IP address gives a rough idea of where you live.
What the company did
Daily Quiz hasn't published a notice that HIBP links to. HIBP marks the breach as verified, which means the data was confirmed as genuine.
What to do if you were in it
- 1
Change your password, and anywhere you reused it
Set a new password for Daily Quiz. If you used the same one anywhere else, change it there too, starting with email and banking. Use a password manager so every account gets its own.
- 2
Turn on two-factor authentication
Add an authenticator app or a passkey to your email, banking and shopping accounts. A leaked password alone then isn't enough to get in.
- 3
Expect phishing that mentions this breach
Criminals use leaked names and emails to write convincing messages. Don't click links in unexpected emails or texts, and go to the company's site by typing the address yourself.
- 4
Check whether your email or phone is in this and other breaches
Run a free Serus scan. It looks across breach databases and the dark web for your email and phone number and tells you what to do about each hit.
Frequently asked
Was I affected by the Daily Quiz breach?
HIBP lets you search your email address. A free Serus scan also checks breach databases and the dark web for your email and phone.
What was exposed?
Email addresses, usernames, IP addresses and passwords stored in plain text.
How many people were affected?
HIBP lists 8,032,404 accounts.
Should I change my password?
Yes. Change it on Daily Quiz and on any other site where you used the same one.
Sources
Something wrong or out of date? Tell us and we'll re-check it.
