Data on 400K Kodi Forum Members Stolen and Put Up for Sale
Open source media player Kodi still hasn't recovered its forum and plans to redeploy it on a new server with software update.
![an image of a digital home theater system. an image of a digital home theater system.](https://eu-images.contentstack.com/v3/assets/blt6d90778a997de1cd/blt0a5c1a4a8651fb9c/64f17180d2ba779eff45a125/Panther_Media_GmbH_via_Alamy.jpg?width=1280&auto=webp&quality=95&format=jpg&disable=upscale)
The Kodi forum (MyBB) is a place where about 400,000 users of the Kodi open source media player come together to share tips on customizing their home theater experience. But when a cache of MyBB user data popped up for sale on an Internet forum, team Kodi took a closer look and realized there had been a major breach.
Logs revealed that a former MyBB admin's account was hijacked to access the admin console on both Feb. 16 and Feb. 21, the Kodi Foundation said in a statement announcing the breach on April 8.
"The account was used to create database backups which were then downloaded and deleted. It also downloaded existing nightly full-backups of the database," the Kodi statement said.
That means all public forum posts, team forum posts, user-to-user messages, and user data, including username, email address, and hashed passwords were compromised, Kodi added.
An April 11 update on the breach by the Kodi Foundation said the forums were being migrated to new servers and will run on an updated version of MyBB software, and the forums will remain offline for several days during the migration.
"As part of the redeployment we will restrict and harden access to the MyBB admin console, revise admin roles to reduce privileges wherever possible, and improve audit logging and backup processes," the statement added.
In the meantime, Kodi Foundation has shared breach data with the haveibeenpwned disclosure site and vowed to share password reset information as soon as the forums are back up. Additionally, the forum wiki is being moved to a new host, the statement added.
About the Author
You May Also Like
Catch the Threat Before it Catches you: Proactive Ransomware Defense
September 5, 2024How to Evaluate Hybrid-Cloud Network Policies and Enhance Security
September 18, 2024DORA and PCI DSS 4.0: Scale Your Mainframe Security Strategy Among Evolving Regulations
September 26, 2024Harnessing the Power of Automation to Boost Enterprise Cybersecurity
October 3, 2024
[Virtual Event] The Essential Guide to Cloud Management
October 17, 2024Black Hat Europe - December 9-12 - Learn More
December 10, 2024SecTor - Canada's IT Security Conference Oct 22-24 - Learn More
October 22, 2024