000webhost Data Breach

What happened

In approximately March 2015, the free web hosting provider 000webhost suffered a major data breach that exposed almost 15 million customer records. The data was sold and traded before 000webhost was alerted in October. The breach included names, email addresses and plain text passwords.

Exposed data

Recommended actions

• Change your 000webhost password immediately, and update it anywhere you reused the same password.
• Enable two-factor authentication on the affected account and on your critical services (email, banking).
• Watch for targeted phishing emails referencing 000webhost — attackers weaponise breach data quickly.
• Check whether your email address appears in this breach on haveibeenpwned.com.