VK 2019 Data Breach: 9,604,343 Records With Names and Usernames

HEROIC analysts logged a data breach record named VK 2019, stored under the site name VKontakte and dated January 1, 2019. It holds 9,604,343 records listing usernames, first names, last names and gender. No email address is among the listed types, but checking your email is still the way to see whether your information appears.

What a Record Without Emails or Passwords Still Offers

A username and a full name are enough to start a search. An attacker can look for the same name on other sites, then follow what turns up. Gender completes a basic profile that makes a scam message sound as though it was written for one person.

The Four Details Listed in the VK 2019 Record

• Usernames, which help an attacker find the same person on other sites.
• First names, used to open a scam message with a personal greeting.
• Last names, which complete the name once it is paired with a first name.
• Gender, a detail that lets a scammer adjust the tone and the story of a message.

The listed data types contain no passwords and no phone numbers.

How These Details Get Used

With a name and a username, an attacker can try to impersonate a person to friends or to a support desk. The same details feed social engineering, where a stranger sounds familiar enough to be believed. None of it needs a password, which is why the risk is easy to underestimate.

How a Database Breach Happens

A database breach means records were copied from one service's own systems rather than from a user's device. The copy covers every record in the affected table, so every listed person is included by default. That also explains how one record set can hold 9,604,343 entries.

Is Your Information in the VK 2019 Record?

To find out, scan your email and see what was exposed. If you used this service, be wary of messages from unfamiliar profiles that seem to know your name, and review who can see your details there. Do not share codes or links that arrive from someone you cannot confirm.

Whether it is a personal address or a work one, the check is the same.