Social Blade confirms breach after hacker posts stolen user data

Social Blade confirms breach after hacker posts stolen user data


Social media analytics platform Social Blade has confirmed they suffered a data breach after its database was breached and put up for sale on a hacking forum.


Social Blade is an analytics platform that provides statistical graphs for YouTube, Twitter, Twitch, Daily Motion, Mixer, and Instagram accounts, allowing customers to see estimated earnings and projects.


The company offers an API allowing customers to integrate the Social Blade data directly into their own platforms.


After BleepingComputer contacted Social Blade about the sale of their data, the company confirmed that they suffered a breach and began sending data breach notifications to customers.


"On December 14th we were notified of a potential data breach whereby an individual had acquired exports our users database and were attempting to sell it on a hacker forum," reads a data breach notification sent to customers.


"Samples were posted and we verified that they were indeed real. It appears this individual made use of of a vulnerability on our website to gain access to our database."



Social Blade data breach notificationSource: Twitter

This data breach notification states that customers that a hacker managed to access the company’s database and steal the following information:


  • Email addresses

  • Password hashes

  • Client IDs

  • Tokens for business API users

  • Auth tokens for connected accounts

  • Various non-personal and internal data

  • The notice clarifies that no credit card information has been exposed due to this security incident.


    While Social Blade states that the user passwords were hashed using the bcrypt algorithm and cannot be easily deciphered, the company still suggests that ..

    Support the originator by clicking the read the rest link below.