ToonDoo Data Breach

What happened

In August 2019, the comic strip creation website ToonDoo suffered a data breach. The data was subsequently redistributed on a popular hacking forum in November where the personal information of over 6M subscribers was shared. Impacted data included email and IP addresses, usernames, genders, the location of the individual and salted password hashes.

Exposed data

Recommended actions

• Change your ToonDoo password immediately, and update it anywhere you reused the same password.
• Enable two-factor authentication on the affected account and on your critical services (email, banking).
• Watch for targeted phishing emails referencing ToonDoo — attackers weaponise breach data quickly.
• Check whether your email address appears in this breach on haveibeenpwned.com.