Millions of users use Mangatoon’s iOS and Android apps to read online Manga comics.
Hackers stole User accounts’ information from an unsecured Elasticsearch database which was possible due to insecure passwords.
Email addresses, genders, social media account identities, auth tokens from social logins, and salted MD5 password hashes were compromised according to the data breach information archive Have I Been Pwned (HIBP).
Source: bleepingcomputer.com, techradar.com, malwarebytes.com, Ziroh Alert (#ZirohAlert)