MovieBoxPro Data Breach

What happened

In April 2024, over 6M records from the streaming service MovieBoxPro were scraped from a vulnerable API. Of questionable legality, the service provided no contact information to disclose the incident, although reportedly the vulnerability was rectified after being mass enumerated.

Exposed data

Recommended actions

• Watch for targeted phishing emails referencing MovieBoxPro — attackers weaponise breach data quickly.
• Check whether your email address appears in this breach on haveibeenpwned.com.