Last weekend, a dump of the database of registered users of the Start online cinema was released to the public. It contains information about almost 44 million users and weighs about 72 GB. This was told by DLBI cybersecurity experts.
The leaked data contains records with first and last names, email addresses, hashed passwords, IP addresses, subscription start and end dates, and last login time.
Experts randomly checked random records from the dump through the password recovery function on the cinema’s website – all data turned out to be valid.
Start has already confirmed the leak, noting that the vulnerability has already been fixed and access to data is closed. The information in the database is for 2021, and it does not contain cleartext passwords, browsing history, and even more so, bank card data, representatives of the service added.
It is not necessary to change the password, but Start recommends that all users do it regularly, regardless of such leaks.