Patreon, a popular crowdfunding platform, experienced a data breach in October 2015. The incident occurred when a mirror of the site, intended for testing and development purposes, was left exposed on the internet. Users were advised to change their passwords on Patreon and any other sites using similar passphrases.

How many accounts were compromised?

The breach impacted data related to approximately 2.33 million individuals.

What data was leaked?

The data exposed in the breach included registered names, email addresses, posts, some shipping addresses, a limited number of billing addresses, and password hashes (encoded).

How was Patreon hacked?

The Patreon data breach occurred when a mirror of the site, intended for testing and development, was left exposed on the internet. Hackers exploited this vulnerability, gaining access to data related to approximately 2.33 million individuals. The exposed data included registered names, email addresses, posts, and some shipping addresses. Although financial information and passwords remained secure, users were advised to change their passwords on Patreon and any other sites using similar passphrases.

Patreon's solution

In response to the hack, Patreon took several measures to secure its platform and prevent future incidents. The company advised users to change their passwords on Patreon and any other sites using similar passphrases. Patreon's founder, Jack Conte, confirmed that no financial information was compromised, and all passwords, social security numbers, and tax form information remained safely encrypted. The company notified affected customers and encouraged them to update their passwords as a precaution. However, specific information on the removal of malware and backdoors, enhancing security protocols, and working with cybersecurity experts remains unclear.

How do I know if I was affected?

Patreon notified customers believed to be affected by the breach. If you're a Patreon user and haven't received a notification, you may visit Have I Been Pwned to check your credentials.

What should affected users do?

In general, affected users should:

• Change Your Password: Immediately update your password on the breached platform. Make sure the new password is strong and unique, not previously used on any other platform.

• Reset Passwords for Other Accounts: If you've used the same or similar passwords for other online accounts, reset those as well. This is crucial as attackers often try using stolen passwords on multiple sites.

• Enable Two-Factor Authentication (2FA): Activate 2FA on the breached account. Consider enabling this additional security feature on all other important online accounts to significantly reduce the risk of unauthorized access.

• Monitor Your Accounts: Keep an eye on your accounts for any suspicious activity and report it immediately to the platform's support team.

For more specific help and instructions related to Patreon's data breach, please contact Patreon's support directly.

Where can I go to learn more?

If you want to find more information on the Patreon data breach, check out the following news articles:

• What happened in the Patreon data breach? | Twingate

• Patreon Security Breach