The Freecycle Network (TFN,) is a private, nonprofit organization that coordinates a worldwide network of “gifting” groups to divert reusable goods from landfills.
The organization confirmed that it has suffered a data breach that impacted more than 7 million users
In response to the incident, The Freecycle Network prompted users to reset their passwords after their credentials were compromised.
The security breach was discovered on August 30, exposed data includes usernames, User IDs, email addresses and passwords.
“On August 30th we became aware of a data breach on Freecycle.org. As a result, we are advising all members to change your passwords as soon as possible.” reads the data breach notice published by the organization. “The breach of data includes usernames, User IDs, email addresses and passwords. Because of the exposure of personal passwords we are taking every measure to quickly inform members about the need to change their passwords.”
The organizations recommend users who have shared the same password elsewhere to change it there as well. According to the notice, no other personal information was compromised and the security breach has been closed.
The Freecycle Network notified the incident to respective privacy authorities and is informing impacted users.
The organization urges users to remain vigilant of phishing emails, and avoid clicking on links in suspicious emails and downloading attachments.
The company has not shared details about the attack.
Follow me on Twitter: @securityaffairs and Facebook and Mastodon
(SecurityAffairs – hacking, data breach)
Fintech firm Figure confirmed a data breach after hackers used social engineering to trick an…
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) adds a flaw in BeyondTrust RS and…
A new alleged Russia-linked APT group targeted Ukrainian defense, government, and energy groups, with CANFAIL…
A new threat actor, UAT-9921, uses the modular VoidLink framework to target technology and financial…
Attackers quickly targeted BeyondTrust flaw CVE-2026-1731 after a PoC was released, enabling unauthenticated remote code…
Google says nation-state actors used Gemini AI for reconnaissance and attack support in cyber operations.…
This website uses cookies.