Popular mathematics website Mathway experienced a potential breach of its database.
It led to the theft of more than 25 million account credentials.
Mathway is widely used by students and children as a resource in learning maths.
The breach has been linked to a hacking group called Shiny Hunters.
The group began selling the database of more than 25 million Mathway user credentials on illicit websites in early May, offering it for $4,000 (£3,285) in cryptocurrency.
The database reportedly contains email addresses and hashed passwords.
Source: https://www.silicon.co.uk/workspace/mathway-data-breach-345176
TPRM report: https://scoringcyber.rankiteo.com/company/mathway
"id": "mat1328301222",
"linkid": "mathway",
"type": "Breach",
"date": "05/2020",
"severity": "50",
"impact": "2",
"explanation": "Attack limited on finance or reputation"
{'affected_entities': [{'customers_affected': 25000000,
'industry': 'Education',
'name': 'Mathway',
'size': 'Large',
'type': 'Educational Website'}],
'data_breach': {'data_encryption': 'Hashed',
'data_exfiltration': True,
'number_of_records_exposed': 25000000,
'personally_identifiable_information': True,
'sensitivity_of_data': 'Medium',
'type_of_data_compromised': ['Email addresses',
'Hashed passwords']},
'date_publicly_disclosed': 'May 2020',
'description': 'Popular mathematics website Mathway experienced a potential '
'breach of its database, leading to the theft of more than 25 '
'million account credentials.',
'impact': {'data_compromised': ['Email addresses', 'Hashed passwords']},
'initial_access_broker': {'data_sold_on_dark_web': True},
'motivation': 'Financial Gain',
'references': [{'source': 'Various News Reports'}],
'threat_actor': 'Shiny Hunters',
'title': 'Mathway Database Breach',
'type': 'Data Breach'}