Mascot App 2022 Data Breach
In June 2022, an Apache Cassandra production database belonging to Mascot (mascot.app), an anime avatar and roleplay-focused social networking mobile application, was exfiltrated and shared across cybercrime forums.
Exposed Data Types
8- Phone numbers
- Names
- Usernames
- Dates of birth
- Genders
- IP addresses
- Device information
- Social connections
About This Record
The exposed dump (mastprod_users.cql) comprises 85,781 registered user account profiles. Compromised data fields include user mobile phone numbers, first and last names, screen handles/nicknames, birthdates, genders, connection IP addresses, mobile device specifications, biography descriptions, declared interests, and social network statistics (followers/followings).
While password hashes were absent from this specific table, the correlation of direct telephone numbers with demographic profiles, behavioral interests, and physical network IP addresses creates significant vectors for mobile smishing, social impersonation, and personal harassment.
Registered users of Mascot are advised to exercise vigilance regarding unexpected text messages claiming to originate from mobile platforms or acquaintances.
Verification and editorial method
LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.
Report missing or incorrect information
