KitchenPal Data Breach

What happened?

In November 2023, the kitchen management application KitchenPal suffered a data breach that exposed 146k lines of data . When contacted about the incident, KitchenPal advised the corpus of data came from a staging environment, although acknowledged it contained a small number of users for debugging purposes and included passwords that could not be used. Impacted data included almost 100k email addresses, names, geolocations and incomplete data on dates of birth, genders, height and weight, social media profile identifiers and bcrypt password hashes.

When did it happen?

The breach date in the public record is November 14, 2023. The record was added to the catalogue on November 24, 2023 and last updated there on November 24, 2023.

What information was reported as exposed?

• Dates of birth
• Email addresses
• Genders
• Geographic locations
• Names
• Passwords
• Physical attributes
• Social media profiles

These are incident-level categories. The record does not prove that every category was exposed for every affected person.

Who may be affected?

This record may be relevant to people who had an account or other relationship with KitchenPal or used kitchenpalapp.com around November 14, 2023. A catalogue entry does not establish that every customer was affected or that every listed data category applied to each person. Compare the record with an official notice addressed to you.

What should you do?

Choose actions that match the information involved. If you find signs that someone is using your identity, the Federal Trade Commission provides a personal recovery plan at IdentityTheft.gov.