Doxbin Data Breach Exposes 370,794 User Accounts and Personal Details
What Happened – In January 2022 the doxing platform Doxbin suffered a breach that leaked more than 370 k unique email addresses, usernames, password hashes and browser user‑agent strings. The compromised data also included personal details collected in “doxes” such as names, physical addresses and phone numbers.
Why It Matters for Trust & Control Assurance
- Demonstrates the risk of weak credential storage and insufficient access controls – a scenario continuous control‑assurance programs are built to detect, monitor, and evidence.
- Highlights the need for robust identity‑and‑access‑management policies and regular verification of password‑hash protection.
- Provides a concrete incident that can be mapped to control objectives for audit readiness and defensible evidence of due‑diligence.
Who Is Affected – Primarily users of the Doxbin service (individuals targeted for doxing) and any downstream parties whose personal data were published in the doxes.
Recommended Actions
- Review and harden password‑hashing algorithms; migrate to memory‑hard functions (e.g., Argon2).
- Implement multi‑factor authentication and strict access‑control reviews for all privileged accounts.
- Conduct a gap analysis against the “identity and access control” control objective and collect evidence for audit readiness.
- Notify affected individuals per applicable breach‑notification regulations.
Technical Notes – The breach appears to have resulted from a compromise of the web application’s authentication store; no public CVE is associated. Exposed data types: email addresses, usernames, password hashes, browser user‑agent strings, and personal identifiers (name, address, phone). Source: Have I Been Pwned – Doxbin breach