ShellCodeX
Tools โ€ข Events โ€ข News โ€ข Insights
ShellCodeX Breach Report

Ethereum Data Breach

ethereum.org
Limited exposure
Verified breach Passwords exposed
Accounts exposed 16,431
Breach date 16 Dec 2016
Added to tracker 20 Dec 2016
Data classes 6

What happened

In December 2016, the forum for the public blockchain-based distributed computing platform Ethereum suffered a data breach. The database contained over 16k unique email addresses along with IP addresses, private forum messages and (mostly) bcrypt hashed passwords. Ethereum elected to self-submit the data to HIBP, providing the service with a list of email addresses impacted by the incident.

Exposed data

Email addresses IP addresses Passwords Private messages Usernames Website activity

Recommended actions

  • Change your Ethereum password immediately, and update it anywhere you reused the same password.
  • Enable two-factor authentication on the affected account and on your critical services (email, banking).
  • Watch for targeted phishing emails referencing Ethereum โ€” attackers weaponise breach data quickly.
  • Check whether your email address appears in this breach on haveibeenpwned.com.
Am I affected? Check whether your email address appears in this breach.
Check on HIBP