The Kodi Foundation Data Breach

What happened?

In February 2023, The Kodi Foundation suffered a data breach that exposed more than 400k user records . Attributed to an account belonging to "a trusted but currently inactive member of the forum admin team", the breach involved the administrator account creating a database backup that was subsequently downloaded before being sold on a hacking forum. The breach exposed email and IP addresses, usernames, genders and passwords stored as MyBB salted hashes. The Kodi Foundation elected to self-submit impacted email addresses to HIBP.

When did it happen?

The breach date in the public record is February 16, 2023. The record was added to the catalogue on April 13, 2023 and last updated there on April 13, 2023.

What information was reported as exposed?

• Browser user agent details
• Dates of birth
• Email addresses
• IP addresses
• Passwords
• Private messages
• Usernames

These are incident-level categories. The record does not prove that every category was exposed for every affected person.

Who may be affected?

This record may be relevant to people who had an account or other relationship with The Kodi Foundation or used kodi.tv around February 16, 2023. A catalogue entry does not establish that every customer was affected or that every listed data category applied to each person. Compare the record with an official notice addressed to you.

What should you do?

Choose actions that match the information involved. If you find signs that someone is using your identity, the Federal Trade Commission provides a personal recovery plan at IdentityTheft.gov.