Mobile company Nothing community member data leaked online
Learn More
The UK-based smartphone company Nothing has confirmed a data breach that compromised the email addresses of its community members.
The breach was first reported by Android Authority and later acknowledged by the company. The leaked data includes:
- usernames,
- display names,
- comment counts,
- last-seen information,
- join dates,
- forum profile permissions,
- email addresses linked to community member profiles,
- profile suspension fields.
The company states that no other personal information such as names, physical addresses, passwords, or payment details were compromised. The data is from 2022, probably related to a data breach from December 2022.
The company issued the following statement:
In December 2022, Nothing discovered a vulnerability, which impacted email addresses belonging to community members at the time. No names, personal addresses, passwords, or payment information were compromised. Upon this discovery nearly a year and half ago, Nothing took immediate action to remedy the situation and bolster its security features.
The original vulnerability might have been due to an exposed API or an export file from the community forum management software.
It's unclear why the data is now leaked online. No details are disclosed about the number of affected individuals.
