123RF

123rf.com

8,668,646
Exposed Records
Mar 2020
Breach Date
6 years ago
Easy to Crack
Password Risk
Information Technology industry
Information Technology
Industry
Added to XposedOrNot on November 8, 2023 · #135 of 763 breaches by records exposed

About This Breach

123RF Stock photo site has suffered a data breach in March 2020. The exposed database contained 8.3 million user records leaked on a hacker forum. Exposed data includes full name, email address, MD5 hashed passwords, company name, phone number, address, PayPal email if used, and IP address.

Data Exposed

Usernames
Email addresses
Passwords
Names
IP addresses
Physical addresses
Phone numbers

Breach Details

Breach Type Data Breach
Searchable Yes
Verified Yes
Sensitive Data No
Reference https://www.teiss.co.uk/123rf-data-breach/ (opens in new tab)

Frequently Asked Questions

When did the 123RF data breach happen?

123RF was breached in Mar 2020. The breach was added to the XposedOrNot index on November 8, 2023.

How many records were exposed in the 123RF breach?

8,668,646 records were exposed, making it the #135 largest of the 763 breaches in our index.

What data was exposed in the 123RF breach?

The exposed data includes: Usernames, Email addresses, Passwords, Names, IP addresses, Physical addresses, Phone numbers.

What should I do if I was affected by the 123RF breach?

Change your password on the affected service (and anywhere you reused it), turn on two-factor authentication, and set up free breach alerts on XposedOrNot so you know the moment your email appears in a new breach.

What Should You Do?

Urgent

Change Your Passwords

Update your password immediately, using 12+ characters with numbers and symbols.

High Priority

Enable Two-Factor Authentication

Add 2FA on all supported accounts using an authenticator app like Google Authenticator or Authy.

Recommended

Watch for Phishing Calls & SMS

Be cautious of unexpected calls or texts asking for personal information.

Recommended

Beware of Scam Mail

Be skeptical of unexpected correspondence requesting personal details.

Recommended

Review Device Security

Update your devices and browsers, and check for unauthorized logins.

Recommended

Monitor Your Accounts

Set up login alerts and review account activity regularly for suspicious access.

Best Practice

Use a Password Manager

Never reuse passwords: use a password manager to generate unique ones for each account.