500px Data Breach
The 2018 500px breach is reported to have occurred on July 5, 2018, and to have been discovered by the company in February 2019. A public breach source catalogues 14,867,999 unique emails with birth-date, email, gender, geographic-location, name, password, and username classes.
Exposed Data Types
7- Dates of birth
- Email addresses
- Genders
- Geographic locations
- Names
- MD5 or bcrypt password hashes depending on account age
- Usernames
About This Breach
Passwords are reported as MD5 or bcrypt hashes depending on account age; a hash is not plaintext. Recoverability of a particular password must not be assumed without authenticating the algorithm, salt, and work factor for that row. The local record measure is 14,864,354, which is 3,645 below the external measure.
A row establishes only actual fields in the dataset. It does not establish identity, an active 500px account, photographer or customer role, photo ownership or licensing, birth-date, gender, location, or username ownership, field co-occurrence, password recovery, account takeover, or misuse.
Birth-date, gender, location, username, and photography-community associations must remain private. If a password is authenticated and was reused elsewhere, it should be replaced, and licensing, payment, or support requests quoting correct portfolio or profile details should be checked through an independently obtained official channel.
Verification and editorial method
LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.
Report missing or incorrect information
