Manga-scanning website MangaDex revealed that it suffered a data breach last week after learning that the site's database was shared between various threat actors.
See also: Data breach at popular marketplace Reverb
MangaDex is one of the largest manga scanlation websites where visitors can read manga comics for free.
In March, MangaDex was hacked, and a hacker claimed to have stolen the site's source code and database, stating that they had not been published anywhere.
After MangaDex took the site offline in response to the attack, the hacker, known as “holo-gfx,” continued to taunt the owners by claiming to have added further vulnerabilities to the site.
See also: Dating app Manhunt suffers serious data breach
MangaDex has since been in an offline state while employees work to release a newer version of their site using the uncompromised source code.
Last week, MangaDex updated its website to state that their user database was privately circulated among various threat actors and that its members' information has been exposed.
The exposed data includes member usernames, email addresses, last known IP addresses, and bcrypt hashed passwords.
After a data breach, attackers typically sell the obtained database to other threat actors who use the data in their own attacks, such as phishingattacks.
When the data no longer generates sales, the database is typically released for free on hacking forums – this is a way for threat actors to build a reputation among the hacker community.
Currently, the MangaDex database is privately released and has not been released publicly.
See also: Booking.com: Fined €475,000 for failing to report data breach in a timely manner
How to check if you are a victim of the MangaDex breach
If you have a MangaDex account and are concerned that your information has been exposed, you can now do the necessary checking on the Have I Been Pwned website.
To do this, simply go to https://haveibeenpwned.com, enter your email address in the search field, and click the pwned? button.
The site will check its database for your email address and report any data breaches that include your email.
If you find that your MangaDex account has been compromised, it is recommended that you change your password – if you use the same password on other sites, you should change it there as well.
Information source: bleepingcomputer.com
