FaceUP 2013

In 2013, the Danish social media site FaceUP suffered a data breach. The incident exposed 87k unique email addresses alongside genders, dates of birth, names, phone numbers and passwords stored as unsalted MD5 hashes. When notified of the incident, FaceUP advised they had identified a SQL injection vulnerability at the time and forced password resets on impacted customers.

• Date: Jan 2013
• Domain: faceup.dk
• Country: Denmark
• Category: Social
• Records Announced: 87,633
• Data: Dates of birth, Email addresses, Genders, Names, Passwords, Phone numbers, Usernames
• Passwords: MD5
• Cracked:
• Imported:
• Source: haveibeenpwned.com