Avast

avast.com

423,497
Exposed Records
May 2014
Breach Date
12 years ago
Easy to Crack
Password Risk
Information Technology industry
Information Technology
Industry
Added to XposedOrNot on November 8, 2023 · #529 of 763 breaches by records exposed

About This Breach

Avast, an antivirus forum, experienced a data breach in 2014. The breach resulted in the exposure of approximately 423,000 member email addresses, usernames, and passwords. At the time of the breach, the website's forum was unresponsive. The company's CEO, Vince Steckler, addressed the hack, stating that user nicknames, usernames, email addresses, and hashed passwords were compromised. He also acknowledged that despite the hashed passwords, a sophisticated attacker might be able to derive many of the passwords.

Data Exposed

Email addresses
Passwords
Usernames

Breach Details

Breach Type Data Breach
Searchable Yes
Verified Yes
Sensitive Data No
Reference https://www.zdnet.com/article/avast-says-hackers-breached-internal-network-through-compromised-vpn-profile/ (opens in new tab)

Frequently Asked Questions

When did the Avast data breach happen?

Avast was breached in May 2014. The breach was added to the XposedOrNot index on November 8, 2023.

How many records were exposed in the Avast breach?

423,497 records were exposed, making it the #529 largest of the 763 breaches in our index.

What data was exposed in the Avast breach?

The exposed data includes: Email addresses, Passwords, Usernames.

What should I do if I was affected by the Avast breach?

Change your password on the affected service (and anywhere you reused it), turn on two-factor authentication, and set up free breach alerts on XposedOrNot so you know the moment your email appears in a new breach.

What Should You Do?

Urgent

Change Your Passwords

Update your password immediately, using 12+ characters with numbers and symbols.

High Priority

Enable Two-Factor Authentication

Add 2FA on all supported accounts using an authenticator app like Google Authenticator or Authy.

Recommended

Monitor Your Accounts

Set up login alerts and review account activity regularly for suspicious access.

Best Practice

Use a Password Manager

Never reuse passwords: use a password manager to generate unique ones for each account.