ThisHabbo Forum Data Breach

What happened

In 2014, the ThisHabbo forum (a fan site for Habbo.com, a Finnish social networking site) appeared among a list of compromised sites which has subsequently been removed from the internet. Whilst the actual date of the exploit is not clear, the breached data includes usernames, email addresses, IP addresses and salted hashes of passwords. A further 584k records were added from a more comprehensive breach file provided in October 2016.

Exposed data

Recommended actions

• Change your ThisHabbo Forum password immediately, and update it anywhere you reused the same password.
• Enable two-factor authentication on the affected account and on your critical services (email, banking).
• Watch for targeted phishing emails referencing ThisHabbo Forum — attackers weaponise breach data quickly.
• Check whether your email address appears in this breach on haveibeenpwned.com.