Gravatar Data Scrap Breach

[Sushubh]

Online avatar service Gravatar allows mass collection of user info

A user enumeration method discovered by an Italian security researcher Carlo Di Dato demonstrates how can Gravatar data be easily scraped by web crawlers and bots.

www-bleepingcomputer-com.cdn.ampproject.org

 

[Navjot Singh]

This is an article from October 2020. Anyway. Already got mails from HIBP on 2 of my email ids which have accounts on gravatar.

 

[Sushubh]

HIBP linked to this article

 

[Jonas]

Verification happened yesterday. The breach happened much earlier.

 

[Navjot Singh]

Gravatar Says It Was Not Hacked After “Have I Been Pwned” Service Notifies Users of a Breach

Gravatar is fielding questions today after “Have I Been Pwned,” a data breech checker service, tweeted “New scraped data: Gravatar had 167M profiles scraped in Oct last year via a…

wptavern.com