[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fv5rv2fakjg1q":3},{"success":4,"breach":5},true,{"_id":6,"name":7,"title":8,"slug":7,"domain":9,"breachDate":10,"addedDate":11,"modifiedDate":12,"contentUpdatedAt":12,"source":13,"sourceUrl":14,"sourceUrls":15,"pwnCount":17,"affectedCount":17,"affectedCountStatus":18,"affectedCountLowerBound":19,"affectedCountUnit":20,"hasEnglishDescription":4,"severity":21,"dataClasses":22,"description":29,"seoTitle":30,"seoTitleEn":31,"seoDescription":30,"seoDescriptionEn":32,"logoUrl":33,"isVerified":4,"isSensitive":4,"isSpamList":34,"isMalware":34,"company":35},"68e3266eda11adda48825125","brand-new-tube","Brand New Tube Data Breach","brandnewtube.com","2022-08-14T00:00:00.000Z","2022-09-08T08:00:37.000Z","2026-07-27T16:11:12.330Z","Third party breach","https:\u002F\u002Fwww.twingate.com\u002Fblog\u002Ftips\u002Fbrand-new-tube-data-breach",[14,16],"https:\u002F\u002Flogoutify.com\u002Fbreaches",349627,"known",null,"unknown","High",[23,24,25,26,27,28],"Email addresses","Genders","IP addresses","Passwords","Private messages","Usernames","\u003Cp>The Brand New Tube data breach is related to the exposure of subscriber and member records on the video sharing platform used under the domain brandnewtube.com. The incident was recorded on August 14, 2022, and the verified impact is at the level of 349,627 accounts. Unverified person counts, data fields, and threat-actor claims are not treated as part of the public incident scope.\u003C\u002Fp>\n\u003Cp>The data categories verified in the breach are email addresses, gender information, IP addresses, passwords, private messages, and usernames. It has been reported that the passwords were stored as unsalted SHA-1 hashes. SHA-1 without salting is considered weak by current password security standards; it carries a high risk of being cracked, especially for short, predictable, or reused passwords from other accounts. The inclusion of private messages directly places this breach in the category of sensitive data breaches.\u003C\u002Fp>\n\u003Ch2>Leaking Data Types and Risks\u003C\u002Fh2>\n\u003Cp>In the Brand New Tube record, email addresses, usernames, gender information, IP addresses, password hashes, and private messages have been verified. When email and username are combined, user identity can be matched with other platforms. IP addresses provide limited technical signals about connection region and session habits. Although gender information alone seems limited, when combined with other fields, it can contribute to more personalized targeting.\u003C\u002Fp>\n\u003Cp>The disclosure of private messages is the most critical risk for users. The message contents may include personal conversations, connections, sharing preferences, or information belonging to third parties. The presence of passwords in unsalted SHA-1 form increases the risk of account takeover. If the same password was used on email, social media, video platform, or forum accounts, attackers may try to use this data on other services as well.\u003C\u002Fp>\n\u003Ch2>Verified Scope and Boundaries\u003C\u002Fh2>\n\u003Cp>Unverified person counts, data fields, and threat-actor claims are not treated as part of the public incident scope. Phone number, physical address, payment card, government ID, or date of birth are not among the verified data fields for this record.\u003C\u002Fp>\n\u003Cp>The incident concerns the member data of the Brand New Tube service. An automatic assumption of violation should not be made for other video sites, social networks, or hosting services within the same content ecosystem. The main number in the record shows the effect of unique accounts. Although the raw row count or the approximate number of users may vary across different lists, the security action should be planned based on the 349,627 verified accounts and the listed data categories.\u003C\u002Fp>\n\u003Ch2>User Groups at Risk\u003C\u002Fh2>\n\u003Cp>Users in the highest risk group are those who reuse the password from their Brand New Tube account on other accounts as well. Since it is common to use the same username across different social accounts on video sharing platforms, the combination of username and email increases the risk of profile matching. Users with private message content also face greater privacy risks due to personal conversations, shared links, or information belonging to third parties.\u003C\u002Fp>\n\u003Cp>The IP address and private messaging area can affect not only the user's technical account security but also their online visibility. Even if a user no longer uses their old account, the risk remains if the same password continues to be used on other accounts. People using the same email address on social media, forums, video platforms, and email accounts should prioritize evaluating this record.\u003C\u002Fp>\n\u003Ch2>Urgent Measures to Be Taken\u003C\u002Fh2>\n\u003Cp>Users who see a match should first determine the password used on their Brand New Tube account and check whether the same or a similar password is used on other accounts. If the same password is still valid elsewhere, it should be changed immediately. Email accounts, social media, video platforms, forums, and work accounts should be prioritized. Unique, long passwords stored with a password manager should be preferred for each account.\u003C\u002Fp>\n\u003Cp>It should not be forgotten that private messages may have been affected. Users should also evaluate any links, personal information, file addresses, or details belonging to third parties shared in private messages. Be cautious of emails themed around account security, video copyright notifications, message archives, or password resets; instead of logging in through links, go directly to the relevant service. Two-factor authentication should be enabled on critical accounts.\u003C\u002Fp>\n\u003Ch2>Long-Term Security Strategies\u003C\u002Fh2>\n\u003Cp>The Brand New Tube incident shows that private message data on video-sharing and community platforms should be protected as much as account security. Users should now regularly review video, forum, and social platform accounts they no longer use. Accounts that can be closed should be closed, unique passwords should be used on those that cannot be closed, and unnecessary personal information should be avoided in private messages.\u003C\u002Fp>\n\u003Cp>From the perspective of service providers, this record reminds that password storage methods need to comply with current standards, private messages should be protected with access control, and old security vulnerabilities must be patched. On the user side, a password manager, multi-factor authentication, leaked password checks, and the deletion of old messages should be applied together. A breach involving private messages results not only in technical account risk but also in privacy impact.\u003C\u002Fp>\n\u003Ch2>Record Control and User Action\u003C\u002Fh2>\n\u003Cp>The user should first evaluate which password they used on this account, where else they used the same username, and what information may have been present in private messages. Even if the password is not remembered, old password patterns used before 2022 should be considered risky.\u003C\u002Fp>\n\u003Cp>A match does not prove that the password was transmitted in plain text; however, unsalted SHA-1 password hashes, along with the exposure of email, IP, username, and private messages, are a strong security warning. Using unique passwords, two-factor authentication, checking incoming messages directly through a trusted channel, and reassessing sensitive information shared in private messages reduce the risks of account takeover and privacy violations that could result from the Brand New Tube breach.\u003C\u002Fp>","","Brand New Tube Data Breach (349.6 Thousand Reported Records)","Brand New Tube Data Breach. 349.6 Thousand reported records were reported. Reported data: Email addresses, Genders, IP addresses. Review the scope, risks, and…","\u002Fuploads\u002Flogo\u002Fbrandnewtube_com.webp",false,{"name":36,"sector":37,"country":30,"website":9,"websiteArchiveUrl":30,"websiteStatus":30,"websiteCheckedAt":19},"Brand New Tube","Video sharing platform"]