Explore Talent (August 2024) exploretalent.com Explore Talent data breach (August 2024): what happened and what to do
In August 2024 a vulnerable API exposed records of 11.4 million Explore Talent users. Have I Been Pwned lists 8,929,384 unique email addresses from the exposure.
View all 13,115 breaches- Breach date
- 15 Aug 2024
- Affected
- 8,929,384
- Data exposed
- Email addresses
- Verified
- Yes
- Last updated
Source: Have I Been Pwned (CC BY 4.0)
Explore Talent is an online network for aspiring actors, models and performers. In August 2024 security researchers found its systems exposed, and Have I Been Pwned (HIBP) added the data on 19 August 2024.
What happened
HIBP says a vulnerable API exposed the personal records of 11.4 million users, of whom 8.9 million unique email addresses were provided to HIBP. The finding came out of research into several connected online services. CyberInsider reports the company has denied any breach. HIBP says this incident is separate from the earlier Explore Talent breach, which has its own page.
What was exposed
HIBP lists 8,929,384 accounts with email addresses. CyberInsider reports that the underlying records also held names, phone numbers and home addresses, but HIBP's entry covers email addresses only.
An email address alone invites phishing. On a talent site the likely bait is a fake casting call, a fake agent or a request for a fee. If your phone number and address were in the records too, expect calls and texts as well.
What to do
Change your Explore Talent password, check that nothing else shares it, and be wary of unsolicited casting offers, especially any that ask for money or documents.
What to do if you were in it
- 1
Change your password and any reuse of it
Change it on the affected service and on every other account that uses the same or a similar password. A password manager makes unique passwords easy. Turn on two-factor login where it's offered.
- 2
Treat unsolicited casting offers as suspect
Real agents and casting directors don't ask for fees up front. Verify who is contacting you through their official site before replying or sharing documents.
- 3
Expect phishing that mentions the breach
Treat unexpected emails, texts and calls as suspect, especially ones that name the company or offer help with the breach. Don't click links in them; go to the company's site yourself.
- 4
Check which other breaches include you
Run a free Serus scan to see whether your email or phone number appears in this and other breaches. Serus monitors breach databases and the dark web and alerts you when your details show up in a new leak.
Frequently asked
Was I affected by this Explore Talent exposure?
Look up your email on Have I Been Pwned, or run a free Serus scan. HIBP lists 8,929,384 email addresses for the August 2024 entry.
What was exposed?
HIBP lists email addresses. CyberInsider reports that the underlying records also held names, phone numbers and home addresses.
Is this the same as the earlier Explore Talent breach?
No. HIBP describes it as separate from the 2022 breach it loaded in July 2024.
Sources
Something wrong or out of date? Tell us and we'll re-check it.
