Disqus

disqus.com

17,557,543
Exposed Records
Jul 2012
Breach Date
14 years ago
Easy to Crack
Password Risk
Entertainment industry
Entertainment
Industry
Added to XposedOrNot on November 8, 2023 · #92 of 763 breaches by records exposed

About This Breach

Disqus, a company that provides a commenting system for websites, experienced a data breach in 2012. The company reported that an unauthorized party gained access to their database, which contained information on approximately 17.5 million user accounts. The categories of data that were breached included email addresses, usernames, and hashed passwords. Disqus stated that they had no evidence that the hackers were able to access any other sensitive information.

Data Exposed

Usernames
Email addresses
Passwords

Breach Details

Breach Type Data Breach
Searchable Yes
Verified Yes
Sensitive Data No
Reference https://blog.disqus.com/security-alert-user-info-breach (opens in new tab)

Frequently Asked Questions

When did the Disqus data breach happen?

Disqus was breached in Jul 2012. The breach was added to the XposedOrNot index on November 8, 2023.

How many records were exposed in the Disqus breach?

17,557,543 records were exposed, making it the #92 largest of the 763 breaches in our index.

What data was exposed in the Disqus breach?

The exposed data includes: Usernames, Email addresses, Passwords.

What should I do if I was affected by the Disqus breach?

Change your password on the affected service (and anywhere you reused it), turn on two-factor authentication, and set up free breach alerts on XposedOrNot so you know the moment your email appears in a new breach.

What Should You Do?

Urgent

Change Your Passwords

Update your password immediately, using 12+ characters with numbers and symbols.

High Priority

Enable Two-Factor Authentication

Add 2FA on all supported accounts using an authenticator app like Google Authenticator or Authy.

Recommended

Monitor Your Accounts

Set up login alerts and review account activity regularly for suspicious access.

Best Practice

Use a Password Manager

Never reuse passwords: use a password manager to generate unique ones for each account.