Liker Social Network Breach Exposes 465K User Records
What Happened
In March 2021 the “kinder, smarter social network” Liker suffered a breach that released the personal data of 465,141 accounts. The leak included email addresses, names, dates of birth, education levels, private messages, security‑question answers, passwords (bcrypt hashes) and other identifiers. Liker has not publicly responded to inquiries.
Why It Matters for Compliance & Audit Readiness
- Demonstrates the need for continuous control‑assurance processes that verify third‑party data‑handling practices and incident‑response readiness.
- Highlights gaps in credential‑rotation and token‑management controls that a robust audit trail would surface before exploitation.
- Reinforces the importance of maintaining defensible evidence of privacy‑by‑design controls (e.g., encryption, least‑privilege access) to satisfy regulator and auditor expectations.
Who Is Affected
- Social‑media platforms and community‑driven web services.
- Vendors that integrate Liker’s API or share authentication tokens.
- Users whose personal identifiers are stored on similar niche networks.
Recommended Actions
- Review any contractual or data‑sharing relationships with Liker and assess exposure.
- Validate that monitoring, alerting, and log‑retention controls are active for third‑party authentication flows.
- Request a formal incident‑response disclosure from Liker, including timelines, root‑cause analysis, and remediation steps.
- Rotate any shared credentials or OAuth tokens that may have been compromised.
- Update privacy impact assessments (PIAs) to reflect the breach and document corrective actions.
Technical Notes
- Attack vector: Unspecified unauthorized access; breach appears to be a targeted data exfiltration.
- CVEs: None reported.
- Data types exposed: Email addresses, names, dates of birth, education levels, geographic locations, IP addresses, usernames, passwords (bcrypt hashes), phone numbers, private messages, security questions/answers, social‑media profile data.
Source: https://haveibeenpwned.com/api/v3/breach/Liker