Benchmark Data Breach

What happened

In November 2019, the Serbian technology news website Benchmark suffered a breach of its forum that exposed 93k customer records. The breach exposed IP and email addresses, usernames and passwords stored as salted MD5 hashes. A forum administrator subsequently advised that the breach was due to the forum previously running on an outdated vBulletin instance.

Exposed data

Recommended actions

• Change your Benchmark password immediately, and update it anywhere you reused the same password.
• Enable two-factor authentication on the affected account and on your critical services (email, banking).
• Watch for targeted phishing emails referencing Benchmark — attackers weaponise breach data quickly.
• Check whether your email address appears in this breach on haveibeenpwned.com.