YouNow Data Breach

What happened?

In February 2019, data from the live broadcasting service YouNow appeared for sale on a dark web marketplace . Whilst it's not clear what date the actual breach occurred on, the impacted data included 18M unique email addresses, IP addresses, names, usernames and links to social media profiles. As authentication is performed via social providers, no passwords were exposed in the breach. Many records didn't have associated email addresses thus the unique number is lower than the reported total number of accounts.

When did it happen?

The breach date in the public record is February 15, 2019. The record was added to the catalogue on July 18, 2019 and last updated there on July 18, 2019.

What information was reported as exposed?

• Email addresses
• IP addresses
• Names
• Social media profiles
• Usernames

These are incident-level categories. The record does not prove that every category was exposed for every affected person.

Who may be affected?

This record may be relevant to people who had an account or other relationship with YouNow or used younow.com around February 15, 2019. A catalogue entry does not establish that every customer was affected or that every listed data category applied to each person. Compare the record with an official notice addressed to you.

What should you do?

Choose actions that match the information involved. If you find signs that someone is using your identity, the Federal Trade Commission provides a personal recovery plan at IdentityTheft.gov.