Data Breach Exposes 79,195 Accounts on “Get Revenge On Your Ex” Site
What Happened — In September 2022 the “Get Revenge On Your Ex” website suffered a breach that released nearly 80 k unique records. The leak included email addresses, names, IP and physical addresses, phone numbers, purchase histories and plain‑text passwords. The data set was posted on a public hacking forum; the operator did not respond to inquiries.
Why It Matters for Trust & Control Assurance
- Demonstrates the risk of weak credential storage and lack of multi‑factor authentication – a core control that continuous‑monitoring programs must verify.
- Highlights the need for auditable evidence that personal data is protected in transit and at rest, satisfying multiple framework requirements with a single control objective.
- Shows how a single data‑exposure incident can erode customer trust and trigger regulatory scrutiny across jurisdictions.
Who Is Affected – Online consumer‑focused services that collect personal identifiers and payment histories (e.g., niche e‑commerce, matchmaking, or “revenge‑service” platforms).
Recommended Actions
- Verify that passwords are stored using strong, salted hashing (e.g., Argon2, bcrypt).
- Implement MFA for all privileged and user accounts.
- Conduct a control‑mapping exercise to document credential‑management safeguards and collect evidence for audit readiness.
Technical Notes – The breach appears to be a result of inadequate credential protection; no specific vulnerability (CVE) was disclosed. Exposed data types: email, name, IP, physical address, phone, purchase history, and clear‑text passwords. Source: [Have I Been Pwned – Get Revenge On Your Ex breach]