Mindjolt data breach (2019) — what was exposed and what to do

We publish these pages from public notices and reporting so you can understand what was exposed. Everything here is already public. Always confirm with the organization named in your notice.

What happened

According to public breach records, the Mindjolt data breach on March 18, 2019 is reported to have exposed the personal information of 28,364,826 accounts.

In March 2019, the online gaming website MindJolt suffered a data breach that exposed 28M unique email addresses. Also impacted were names and dates of birth, but no passwords.

In March 2019, the online gaming website MindJolt suffered a data breach that exposed approximately 28.4 million unique user records, with the breach dated March 18, 2019. The exposed data included email addresses, names, and dates of birth, but no passwords were compromised. The data was subsequently provided by a third party to Have I Been Pwned and added to its index on July 13, 2019; specific technical details of the breach method were not publicly disclosed.

What data was exposed

The following types of personal data were compromised:

• Dates of birth
• Email addresses
• Names

Breach details

This summary is compiled from public breach-notification data and known leak databases. Figures reflect what those sources report and may be revised as more is learned. If something here looks wrong or you think your information is involved, contact our support team.

We report breaches as a factual record to help people check their exposure. Inclusion here is not an allegation of wrongdoing or negligence by Mindjolt; it reflects a publicly reported security incident.

What to do now

Based on the data exposed in this breach, here are the steps you should take:

• Be alert for targeted phishing emails that reference your name or use your email address, since these were exposed and can make scam messages look more convincing.
• Treat your date of birth as compromised: avoid using it as a security answer or partial identity verifier, and watch for identity-verification attempts that rely on name plus birthdate.
• If you reused any login email at other gaming or web accounts, ensure each has a unique password and enable two-factor authentication where available.