[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f3nwy2lp4brx5e":3},{"success":4,"breach":5},true,{"_id":6,"name":7,"title":8,"slug":9,"domain":10,"breachDate":11,"addedDate":12,"modifiedDate":12,"contentUpdatedAt":13,"source":14,"sourceUrl":15,"sourceUrls":16,"pwnCount":20,"affectedCount":20,"affectedCountStatus":21,"affectedCountLowerBound":22,"affectedCountUnit":23,"hasEnglishDescription":4,"severity":24,"dataClasses":25,"description":31,"seoTitle":32,"seoTitleEn":33,"seoDescription":32,"seoDescriptionEn":34,"logoUrl":35,"isVerified":4,"isSensitive":36,"isSpamList":36,"isMalware":36,"company":37},"68e3266eda11adda488252a2","Mathway","Mathway Data Breach","mathway","mathway.com","2020-01-13T00:00:00.000Z","2020-06-05T23:59:45.000Z","2026-07-19T15:16:58.932Z","Education platform breach","https:\u002F\u002Fwww.mathway.com\u002Fsecurity",[15,17,18,19],"https:\u002F\u002Fsecurityaffairs.com\u002F103721\u002Fdata-breach\u002Fmathway-data-breach.html","https:\u002F\u002Fwww.silicon.co.uk\u002Fworkspace\u002Fmathway-data-breach-345176","https:\u002F\u002Fwww.zdnet.com\u002Farticle\u002F25-million-user-records-leak-online-from-popular-math-app-mathway\u002F",25692862,"known",null,"unknown","Critical",[26,27,28,29,30],"Device information","Email addresses","Names","Passwords","Social media profiles","\u003Cp>A January 2020 breach of the Mathway problem-solving service exposed data tied to \u003Cstrong>25,692,862 unique accounts\u003C\u002Fstrong>. The records were later offered for sale on an online criminal marketplace, and Mathway confirmed on May 15, 2020 that an unauthorized party had obtained some customer account data.\u003C\u002Fp>\u003Ch2>Types of Exposed Data and Risks\u003C\u002Fh2>\u003Cp>The canonical record lists device information, email addresses, names, passwords, and social media profiles. The sold corpus also included names and Google and Facebook identifiers. The company's investigation specifically confirmed login email addresses and \u003Cstrong>salted password hashes\u003C\u002Fstrong>; plaintext passwords were not acquired.\u003C\u002Fp>\u003Cp>The company said it had no reason to believe credit-card or further personal information was affected and that subscription payment information was stored in a separate system. Phone numbers, physical addresses, bank details, and identity documents are not verified data classes for this record.\u003C\u002Fp>\u003Ch2>Breach Timeline and Technical Details\u003C\u002Fh2>\u003Cp>The canonical breach date is January 13, 2020. After the data was offered for sale in May 2020, the company engaged a security firm, confirmed unauthorized acquisition on May 15, and required password resets for users signing in after May 22. The precise technical entry point was not disclosed in public evidence, so no specific vulnerability or attacker is presented as established fact.\u003C\u002Fp>\u003Ch2>User Groups at Risk\u003C\u002Fh2>\u003Cp>People who reused a Mathway password on education, email, social-media, or work accounts face the greatest risk. Email addresses, names, and linked social-profile identifiers can support targeted phishing, while device information can make fake security notices more convincing. Salted password hashes are better protected than plaintext, but weak passwords are not immune to offline guessing attacks.\u003C\u002Fp>\u003Ch2>Immediate Steps to Take\u003C\u002Fh2>\u003Cp>Change the old Mathway password and every account that used the same or a similar password. Use a \u003Cstrong>unique password\u003C\u002Fstrong> for each service, secure the email account first, and enable two-step verification where supported. Verify password-reset or subscription messages by visiting the Mathway site directly rather than following links.\u003C\u002Fp>\u003Ch2>Long-Term Security Strategies\u003C\u002Fh2>\u003Cp>Use a password manager to generate a different password for every account, and avoid mixing school, work, and personal email addresses across services unnecessarily. Review old education accounts regularly, close those you no longer use, and keep social-login connections and recovery options current.\u003C\u002Fp>\u003Ch2>Check Your Data\u003C\u002Fh2>\u003Cp>Check this record with the email address you used for Mathway. A match means device information, email, name, a password hash, or a social-profile identifier may appear in the corpus; it does not mean your credit card was affected. If the result is positive, eliminate password reuse and review email-account sessions and recovery settings.\u003C\u002Fp>","","Mathway Data Breach (25.7 Million Reported Records)","Mathway Data Breach. 25.7 Million reported records were reported. Reported data: Device information, Email addresses, Names. Review the scope, risks, and…","\u002Fuploads\u002Flogo\u002Fmathway_com.webp",false,{"name":7,"sector":38,"country":39,"website":10,"websiteArchiveUrl":32,"websiteStatus":32,"websiteCheckedAt":22},"Educational Technology \u002F Math Solver","United States"]