Netlog netlog.com Netlog data breach: what happened and what to do
In July 2018, Belgian social network Netlog identified a breach dating back to November 2012. About 49 million email addresses and plain text passwords were exposed, though the service closed in 2015.
View all 13,115 breaches- Breach date
- Nov 2012
- Affected
- 49,038,354
- Data exposed
- Email addresses, Passwords
- Verified
- Yes
- Last updated
Source: Have I Been Pwned (CC BY 4.0)
What happened
In July 2018, the Belgian social networking site Netlog identified a data breach of its systems that dated back to November 2012. The service had been discontinued in 2015. Its operator, Massive Media, said in a notice to users filed with the California Attorney General that its security team found the database compromise through proactive monitoring, and that the database held no government ID numbers, payment card or banking information.
What was exposed
The breach affected 49 million subscribers. Email addresses and passwords were exposed, and the passwords were in plain text, meaning readable with no cracking needed.
What it means for you
Plain text passwords are the worst case: anyone with the data can try them on other accounts straight away. If you ever used your Netlog password on another site, that password is compromised, even after all these years.
What to do
Change any password you reused from your Netlog days and turn on two-factor login. Expect phishing to your old email address.
What to do if you were in it
- 1
Change any password you shared with Netlog
If you reused your Netlog password anywhere, change it on those accounts now. Plain text passwords need no cracking.
- 2
Turn on two-factor login
Use an authenticator app or passkey on email and other important accounts, so an old password alone can't get in.
- 3
Expect phishing that fits the data
An old Netlog email address may still get scam messages. Treat unexpected messages with suspicion and open sites yourself.
- 4
Check which other breaches include you
Run a free Serus scan to see whether your email or phone number appears in this and other breaches. Serus monitors breach databases and the dark web and alerts you when your details show up again.
Frequently asked
Was I affected by the Netlog breach?
Check your email on Have I Been Pwned or run a free Serus scan. If you registered on Netlog before December 2012, assume yes.
What was exposed?
Email addresses and plain text passwords for 49 million subscribers.
Were payment details exposed?
In its notice, Massive Media said the database held no government ID numbers, payment card or banking information.
Should I change my password?
Yes, on any account that used the same password as Netlog.
Sources
Something wrong or out of date? Tell us and we'll re-check it.
