[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f8vfyeq0sbxty":3,"$fmm7fjbqlphtf":62},{"success":4,"breach":5},true,{"_id":6,"name":7,"title":8,"slug":7,"domain":9,"breachDate":10,"addedDate":11,"publishedAt":12,"modifiedDate":12,"contentUpdatedAt":12,"source":13,"sourceUrl":14,"sourceUrls":15,"pwnCount":17,"affectedCount":17,"affectedCountStatus":18,"affectedCountLowerBound":19,"affectedCountUnit":20,"hasEnglishDescription":4,"contentLocale":21,"availableLocales":22,"translations":32,"severity":43,"dataClasses":44,"description":50,"seoTitle":51,"seoDescription":52,"logoUrl":53,"isVerified":4,"isSensitive":4,"isSpamList":54,"isMalware":54,"company":55},"68e3266eda11adda48825257","kickstarter","Kickstarter 2014年数据泄露事件","kickstarter.com","2014-02-16T00:00:00.000Z","2017-10-06T07:29:07.000Z","2026-10-10T08:38:58.883Z","company notice and verified breach index","https:\u002F\u002Fwww.kickstarter.com\u002Fblog\u002Fimportant-kickstarter-security-notice",[14,16],"https:\u002F\u002Fwww.kickstarter.com\u002F",5176463,"known",null,"email_identifiers","zh",[23,24,21,25,26,27,28,29,30,31],"en","tr","hi","es","ar","fr","bn","pt","ru",{"en":33,"tr":34,"zh":35,"hi":36,"es":37,"ar":38,"fr":39,"bn":40,"pt":41,"ru":42},{"slug":7},{"slug":7},{"slug":7},{"slug":7},{"slug":7},{"slug":7},{"slug":7},{"slug":7},{"slug":7},{"slug":7},"Critical",[45,46,47,48,49],"Email addresses","Passwords","Usernames","Phone numbers","Physical addresses","\u003Cp>\u003Cstrong>Kickstarter 2014年数据泄露事件\u003C\u002Fstrong>是指这家众筹平台披露部分客户数据遭到未经授权访问的事件。公司表示，在收到执法部门的通知后，已封堵漏洞，并确认被访问的数据包括用户名、电子邮箱地址、邮寄地址、电话号码和加密密码。已核实的外部数据集记录了 5,176,463 个唯一电子邮箱地址。这一数字并不代表账户数、项目支持者人数或本地数据行数。\u003C\u002Fp>\n\n\u003Ch2>事件日期和范围有多明确？\u003C\u002Fh2>\n\u003Cp>外部泄露记录采用的日期是2014年2月16日。Kickstarter 的安全通告确认了该事件及受影响的字段类别，但未披露攻击者首次进入系统的时间，因此不应将目录中的日期视为最初入侵的日期。公司表示，没有证据表明信用卡数据曾被访问，而且截至通告发布时，仅在两个账户上发现了未经授权的活动。这一有限范围的声明并不意味着没有数据被窃取，也不能排除后续遭到滥用的可能。\u003C\u002Fp>\n\n\u003Cp>据公司介绍，较早的密码均使用独立的盐值，并通过 SHA-1 进行多轮哈希处理；较新的密码则使用 bcrypt。这些并非明文密码，但也不应认为它们不会受到离线猜测攻击。信用卡数据未作为结构化数据类别保留。姓名也未纳入，因为选用的来源资料未明确将其列为此次事件中已核实的一般性字段。\u003C\u002Fp>\n\n\u003Ch2>为什么外部与本地的统计结果不同？\u003C\u002Fh2>\n\u003Cp>已完成的生产环境导入仅包含电子邮箱，处理了 5,169,669 行有效数据，并在在线索引中建立了 5,169,660 条唯一邮箱关联。本地导入任务未导入用户名、密码、电话号码或邮寄地址，因此本记录并不声称这些字段在本地数据中同时出现。外部统计的唯一电子邮箱数量比本地关联数量多 6,803。数据集版本、规范化处理和去重方面的差异尚未核对清楚；本记录不认定差异原因，也不将这些数字相加。\u003C\u002Fp>\n\n\u003Cp>Kickstarter 当前使用的域名和事件通告仍可访问。仅凭电子邮箱匹配结果，无法确定某人曾创建项目、支持某项特定众筹活动，或其电话号码和地址字段包含在此次事件的数据中。如果可能曾在其他服务上重复使用同一密码，应为该服务设置独一无二的密码，并可使用 Kickstarter 目前提供的双因素身份验证和访问历史功能。收到意料之外的账户或付款消息时，应自行访问官方域名进行核实，而不是点击消息中的链接。\u003C\u002Fp>","Kickstarter 2014年数据泄露事件 (5.2 百万 电子邮件标识符)","Kickstarter 2014年数据泄露事件. 据报告，涉及5.2 百万个电子邮件标识符。 已报告的数据：电子邮箱地址, 密码, 用户名。 了解影响范围、风险及防护措施。","\u002Fuploads\u002Flogo\u002Fkickstarter_com.webp",false,{"name":56,"sector":57,"country":58,"website":9,"websiteArchiveUrl":59,"websiteStatus":60,"websiteCheckedAt":61},"Kickstarter, PBC","Crowdfunding","United States","","active","2026-07-29T21:09:00.000Z",{"success":4,"breaches":63},[64,71,78,85],{"slug":65,"title":66,"companyName":67,"logoUrl":68,"breachDate":69,"affectedCount":70,"affectedCountStatus":18},"apoiase","APOIA.se 数据泄露（45.08万个账户受影响）","APOIA.se","\u002Fuploads\u002Flogo\u002Fapoia_se.webp","2025-12-16T00:00:00.000Z",450764,{"slug":72,"title":73,"companyName":74,"logoUrl":75,"breachDate":76,"affectedCount":77,"affectedCountStatus":18},"givesendgo","GiveSendGo 数据泄露","GiveSendGo","\u002Fuploads\u002Flogo\u002Fgivesendgo_com.webp","2022-02-07T00:00:00.000Z",89966,{"slug":79,"title":80,"companyName":81,"logoUrl":82,"breachDate":83,"affectedCount":84,"affectedCountStatus":18},"medela","Medela 数据泄露","Medela","\u002Fuploads\u002Flogo\u002Fmedela.webp","2026-09-07T00:00:00.000Z",423947,{"slug":86,"title":87,"companyName":88,"logoUrl":89,"breachDate":90,"affectedCount":91,"affectedCountStatus":18},"dustin-group-2026-data-security-incident","Dustin Group 2026年数据安全事件","Dustin Group AB (publ)","\u002Fuploads\u002Flogo\u002Fdustingroup_com-6aaab48e5041e3a842fe832a-e26a53490c4a5cbe.webp","2026-09-03T00:00:00.000Z",1062841]