Baby Names Data Breach

What happened

In approximately 2008, the site to help parents name their children known as Baby Names suffered a data breach. The incident exposed 846k email addresses and passwords stored as salted MD5 hashes. When contacted in October 2018, Baby Names advised that "the breach happened at least ten years ago" and that members were notified at the time.

Exposed data

Recommended actions

• Change your Baby Names password immediately, and update it anywhere you reused the same password.
• Enable two-factor authentication on the affected account and on your critical services (email, banking).
• Watch for targeted phishing emails referencing Baby Names — attackers weaponise breach data quickly.
• Check whether your email address appears in this breach on haveibeenpwned.com.