Knuddels

knuddels.de

808,346
Exposed Records
Sep 2018
Breach Date
7 years ago
Plain Text
Password Risk
Entertainment industry
Entertainment
Industry
Added to XposedOrNot on November 8, 2023 · #433 of 763 breaches by records exposed

About This Breach

The popular German dating and chat service, Knuddels, faced a security breach in 2018where over 800k user accounts were compromised. The breach exposed email addresses, usernames, and poorly-encrypted passwords. Knuddels stored user data in plain text without adequate safeguards. The company promptly deleted the unencrypted passwords and informed users about the incident. As a result, Knuddels received a €20,000 fine, the first under the General Data Protection Regulation (GDPR) in Germany.

Data Exposed

Usernames
Email addresses
Passwords
Names
Geographic locations

Breach Details

Breach Type Data Breach
Searchable Yes
Verified Yes
Sensitive Data No
Reference https://threatpost.com/knuddels-flirt-app-slapped-with-hefty-fine-after-data-breach/139384/ (opens in new tab)

Frequently Asked Questions

When did the Knuddels data breach happen?

Knuddels was breached in Sep 2018. The breach was added to the XposedOrNot index on November 8, 2023.

How many records were exposed in the Knuddels breach?

808,346 records were exposed, making it the #433 largest of the 763 breaches in our index.

What data was exposed in the Knuddels breach?

The exposed data includes: Usernames, Email addresses, Passwords, Names, Geographic locations.

What should I do if I was affected by the Knuddels breach?

Change your password on the affected service (and anywhere you reused it), turn on two-factor authentication, and set up free breach alerts on XposedOrNot so you know the moment your email appears in a new breach.

What Should You Do?

Urgent

Change Your Passwords

Update your password immediately, using 12+ characters with numbers and symbols.

High Priority

Enable Two-Factor Authentication

Add 2FA on all supported accounts using an authenticator app like Google Authenticator or Authy.

Recommended

Monitor Your Accounts

Set up login alerts and review account activity regularly for suspicious access.

Best Practice

Use a Password Manager

Never reuse passwords: use a password manager to generate unique ones for each account.