CyberServe Data Breach

What happened?

In October 2021, the Israeli hosting provider CyberServe was breached and ransomed before having a substantial amount of their customer data leaked publicly by a group known as "Black Shadow" . Amongst the data was the LGBTQ dating site Atraf and the Machon Mor medical institute. Due to multiple different sites being compromised, the impacted data is broad and ranges from relationship information to medical data to email addresses and passwords stored in plain text. The data was made available to HIBP with support from May Brooks-Kempler, founder of the Think Safe Cyber community in Israel .

When did it happen?

The breach date in the public record is October 29, 2021. The record was added to the catalogue on November 4, 2021 and last updated there on November 4, 2021.

What information was reported as exposed?

• Dates of birth
• Drinking habits
• Email addresses
• Family structure
• Genders
• Geographic locations
• HIV statuses
• IP addresses
• Names
• Passwords
• Personal health data
• Phone numbers
• Physical attributes
• Private messages
• Profile photos
• Religions
• Sexual orientations
• Smoking habits
• Usernames

These are incident-level categories. The record does not prove that every category was exposed for every affected person.

Who may be affected?

This record may be relevant to people who had an account or other relationship with CyberServe or used cyberserve.co.il around October 29, 2021. A catalogue entry does not establish that every customer was affected or that every listed data category applied to each person. Compare the record with an official notice addressed to you.

What should you do?

Choose actions that match the information involved. If you find signs that someone is using your identity, the Federal Trade Commission provides a personal recovery plan at IdentityTheft.gov.