---
title: "Data breach at Kayo.moe Credential Stuffing List"
description: "In September 2018, Kayo.moe Credential Stuffing List suffered a data breach. 42 million accounts were affected. The exposed data includes email addresses and passwords. Have I Been Pwned flags this breach as unverified: its origin could not be confirmed."
canonical: https://inyourgeek.com/en/fuites-de-donnees/2018-09-11-kayo-moe-credential-stuffing-list
type: fuite-de-donnees
author: "Sébastien Soulier"
publisher: "InYourGeek"
language: en
datePublished: 2018-09-13
dateModified: 2018-09-13
---
# Kayo.moe Credential Stuffing List

Data breach — High

In September 2018, Kayo.moe Credential Stuffing List suffered a data breach. 42 million accounts were affected. The exposed data includes email addresses and passwords. Have I Been Pwned flags this breach as unverified: its origin could not be confirmed.

| Fact | Value |
| --- | --- |
| Disclosed on | September 13, 2018 |
| Incident dated | September 11, 2018 |
| Accounts affected | 42M |
| Sector | Digital services |
| Country | International or undetermined |
| Cause | Undisclosed |
| Severity | High |
| Status | Reported |

## Exposed data

- Email address
- Password (hashed)

## What you can do

- Change that password — and everywhere you reused it. That is how a leak spreads to your other accounts.
- Turn on two-factor authentication on the affected accounts: a stolen password is then no longer enough.
- Expect phishing attempts quoting your name and this company. A message that knows your details is not legitimate for that reason.
- You can ask the organisation exactly what was exposed about you (right of access), and complain to the DPA if no answer comes within a month.

## Sources

- [Have I Been Pwned — Kayo.moe Credential Stuffing List](https://haveibeenpwned.com/Breach/KayoMoe) — Have I Been Pwned (CC BY 4.0)

_Entry built from Have I Been Pwned’s structured data, with no model rewriting._

---

Equivalent HTML page : https://inyourgeek.com/en/fuites-de-donnees/2018-09-11-kayo-moe-credential-stuffing-list
Published by InYourGeek — https://inyourgeek.com/en/a-propos
Method and safeguards : https://inyourgeek.com/en/methode
Full register : https://inyourgeek.com/en/fuites-de-donnees