Streaming platform Kodi discloses data breach

Top Class Actions’s website and social media posts use affiliate links. If you make a purchase using such links, we may receive a commission, but it will not result in any additional charges to you. Please review our Affiliate Link Disclosure for more information.

Kodi data breach overview: 

• Who: Streaming platform Kodi has confirmed that it suffered a data breach. 
• Why: Kodi discovered the data breach after it was made aware its MyBB software was being advertised for sale on internet forums. 
• Where: Kodi is used by consumers nationwide. 
• What are my options: Consumers looking for data breach protection may be interested in products from SentryPC.

Streaming platform Kodi confirmed that it suffered a data breach after the account of a “trusted but inactive” member of its user forum admin team was twice-used to access its web-based MyBB admin console.

Kodi said it discovered the data breach after it was made aware that its MyBB software was being advertised for sale on internet forums. 

The account was used to improperly access Kodi’s MyBB admin console on Feb. 16 and Feb. 21, according to the company, which said the infiltrated account was used to “create database backups which were then downloaded and deleted.” 

Kodi said the account was also used to download “existing nightly full-backups of the database,” and disclosed that it confirmed with the original account owner that they had not accessed their account to perform the actions. 

“The admin team have disabled the account used in the breach and have conducted an initial review of team infrastructure the team member had access to,” Kodi said. 

Exposed information included public forum posts, all team forum posts, all messages sent through its user-to-user messaging system, and user data that includes forum usernames and email addresses used for notifications, according to Kodi. 

Encrypted password generated by MyBB software exposed in data breach, Kodi warns

An encrypted password generated by the MyBB software was also exposed in the data breach, according to Kodi, which said the company has not found any evidence of unauthorized access to its “underlying server that hosts the MyBB software” at this time. 

Despite this, Kodi has advised its users to “assume all passwords are compromised” as a result of the data breach, and to follow password/reset change procedures for any duplicate username and passwords.

“Users must assume their Kodi forum credentials and any private data shared with other users through the user-to-user messaging system is compromised,” the company said. 

Kodi said it will provide users with instructions on “how to complete a reset of your Kodi forum password” once it brings its forum back online, however, no timeline was currently given for when that will be. 

“There is currently no time estimate for the forum server being online again; our focus is being thorough, not being quick,” Kodi said. 

In other data breach news, NuLife agreed to a class action settlement earlier this month to end claims revolving around its handling of a 2022 data breach that exposed the personal health information of its patients. 

Are you affected by the Kodi data breach? Let us know in the comments! 

Read About More Class Action Lawsuits & Class Action Settlements:

• Judge consolidates BetMGM data breach class action lawsuits
• Mount Saint Mary College class action claims data breach exposed data of 17K individuals
• Alacrity Solutions Group data breach class action settlement
• New study finds 2/5 of IT professionals told to hide data breaches