Daily Quiz dailyquiz.me Daily Quiz data breach: what happened and what to do
In January 2021, the quiz site Daily Quiz had a breach that exposed over 8 million unique email addresses, plus usernames, IP addresses and passwords stored in plain text. Have I Been Pwned added it in May 2021.
View all 13,177 breaches- Breach date
- 13 Jan 2021
- Affected
- 8,032,404
- Data exposed
- Email addresses, IP addresses, Passwords, Usernames
- Verified
- Yes
- Last updated
Source: Have I Been Pwned (CC BY 4.0)
Reviewed by Anthon Wansland
Head of Product & Co-Founder
Serus is a privacy company with paid tools to find and remove your personal data. This page is free and based on official sources.
Daily Quiz is a quiz website. It suffered a data breach in January 2021, and Have I Been Pwned (HIBP), the breach notification service run by security researcher Troy Hunt, added it in May 2021. HIBP counts 8,032,404 affected accounts.
What happened
HIBP says the breach exposed over 8 million unique email addresses, and that the data came out in January 2021. It doesn't say how the breach happened.
Sources checked: haveibeenpwned.com, dailyquiz.me
Last verified against the official page:
What was exposed
The data has email addresses, usernames, IP addresses and passwords. HIBP notes the passwords were stored in plain text, so anyone holding the data could read them without cracking anything.
That matters most if you reuse passwords. Criminals feed leaked email and password pairs to other sites, a tactic called credential stuffing, and a plain text password works on the first try. Your email address also makes you a phishing target. The IP address gives a rough idea of where you live.
What the company did
Daily Quiz hasn't published a notice that HIBP links to. HIBP marks the breach as verified, which means the data was confirmed as genuine.
What to do if you were in it
- 1
Change your password, and anywhere you reused it
Set a new password for Daily Quiz. If you used the same one anywhere else, change it there too, starting with email and banking. Use a password manager so every account gets its own.
- 2
Turn on two-factor authentication
Add an authenticator app or a passkey to your email, banking and shopping accounts. A leaked password alone then isn't enough to get in.
- 3
Expect phishing that mentions this breach
Criminals use leaked names and emails to write convincing messages. Don't click links in unexpected emails or texts, and go to the company's site by typing the address yourself.
- 4
Check whether your email or phone is in this and other breaches
Run a free Serus scan. It looks across breach databases and the dark web for your email and phone number and tells you what to do about each hit.
Timeline
-
The breach happened
-
Added to Have I Been Pwned
Frequently asked
Was I affected by the Daily Quiz breach?
HIBP lets you search your email address. A free Serus scan also checks breach databases and the dark web for your email and phone.
What was exposed?
Email addresses, usernames, IP addresses and passwords stored in plain text.
How many people were affected?
HIBP lists 8,032,404 accounts.
Should I change my password?
Yes. Change it on Daily Quiz and on any other site where you used the same one.
Sources
- Have I Been Pwned: DailyQuiz
- Have I Been Pwned: Daily Quiz Data Breach · haveibeenpwned.com
- Casino Review: How to Evaluate Online Casinos Before You Play · dailyquiz.me
Something wrong or out of date? Tell us and we'll re-check it.
What changed
- Page text rewritten in plainer language; no facts changed.
