Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Data Breaches

SurveyLama Data Breach Impacts 4.4 Million Users

Data breach impacting users’ personal information prompts survey rewards platform SurveyLama to reset passwords.

Survey rewards platform SurveyLama says it is aware of a data breach impacting the personal information of more than 4.4 million users.

The incident occurred in February but came to light this week, when the leaked information was added to the data breach notification platform Have I Been Pwned (HIBP).

According to the alert service, more than 4.4 million user email addresses were compromised in the incident, along with various types of personal information, including names, addresses, phone numbers, dates of birth, and IP addresses.

“Passwords stored as either salted SHA-1, bcrypt or argon2 hashes” were also compromised, HIBP says. Although not immediately usable, hashed passwords can be cracked with enough time and effort, potentially exposing user accounts to further compromise.

Responding to a SecurityWeek inquiry, SurveyLama said it has already prompted a platform-wide password reset to help users keep their accounts secure.

“We notified users by email by deleting their password so that they could create a new one,” the platform said.

“We were already notified of a possible leak a month or two ago,” SurveyLama revealed.

The platform also said that it does not know how the leak occurred and that it has “made security checks and modifications to strengthen our system”.

Advertisement. Scroll to continue reading.

SurveyLama allows registered users to earn monetary rewards by completing surveys, promising earnings of up to $300 per month. The platform is owned by French company Globe Media.

Users should reset the password for their SurveyLama accounts as soon as possible and should also change their credentials for any other online account secured with the same email and password pair.

Related: Prudential Financial Data Breach Impacts 36,000

Related: OWASP Data Breach Caused by Server Misconfiguration

Related: Massachusetts Health Insurer Data Breach Impacts 2.8 Million

Written By

Ionut Arghire is an international correspondent for SecurityWeek.

Trending

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Join the session as we discuss the challenges and best practices for cybersecurity leaders managing cloud identities.

Register

SecurityWeek’s Ransomware Resilience and Recovery Summit helps businesses to plan, prepare, and recover from a ransomware incident.

Register

People on the Move

Cody Barrow has been appointed the new CEO of threat intelligence company EclecticIQ.

Shay Mowlem has been named CMO of runtime and application security company Contrast Security.

Attack detection firm Vectra AI has appointed Jeff Reed to the newly created role of Chief Product Officer.

More People On The Move

Expert Insights

Related Content

Data Breaches

OpenAI has confirmed a ChatGPT data breach on the same day a security firm reported seeing the use of a component affected by an...

Cybercrime

Zendesk is informing customers about a data breach that started with an SMS phishing campaign targeting the company’s employees.

Data Breaches

LastPass DevOp engineer's home computer hacked and implanted with keylogging malware as part of a sustained cyberattack that exfiltrated corporate data from the cloud...

CISO Strategy

Okta is blaming the recent hack of its support system on an employee who logged into a personal Google account on a company-managed laptop.

Data Breaches

Delta Dental of California says over 6.9 million individuals were impacted by a data breach caused by the MOVEit hack.

Data Breaches

Sony shares information on the impact of two recent unrelated hacker attacks carried out by known ransomware groups. 

Data Breaches

AT&T is notifying millions of wireless customers that their CPNI was compromised in a data breach at a third-party vendor.

Data Breaches

A group of hackers has leaked Atlassian employee records and floorplans, information that was obtained from third-party workplace platform Envoy.