In 2016, the South African cinema company Ster-Kinekor had a security flaw which leaked a large amount of customer data via an enumeration vulnerability in the API of their old website. Whilst more than 6 million accounts were leaked by the flaw, the exposed data only contained 1.6 million unique email addresses. The data also included extensive personal information such as names, addresses, birthdates, genders and plain text passwords.
Accounts breached: 1619544
Breached on: March 09, 2017
Exposed data: Dates of birth, Email addresses, Genders, Names, Passwords, Phone numbers, Physical addresses, and Spoken languages
Domain: sterkinekor.co.za
Added on: March 13, 2017