BannerBit Data Breach (2018): What Was Exposed & What To Do

In December 2018, the online advertising platform BannerBit experienced a data breach that exposed 213,000 unique email addresses and passwords stored in plain text. The incident was reported on December 29, 2018, after the data set was provided to Have I Been Pwned by a third party. Multiple attempts to contact BannerBit received no response, leaving the circumstances of the exposure unconfirmed beyond the contents of the data itself.

Inside the incident

The breach is recorded as having occurred around December 2018. The compromised data set contained 213,000 records consisting solely of email addresses and passwords held in plain text. No further details on the method of access, the duration of exposure, or the number of files involved have been made public. The data reached Have I Been Pwned through an intermediary rather than through a direct disclosure by BannerBit.

How a breach like this happens

Incidents involving online platforms commonly begin with unauthorized access to servers or databases that store user credentials. Attackers may exploit vulnerabilities in web applications, gain entry through compromised administrative accounts, or obtain data after an earlier intrusion into a connected system. Once inside, they can copy authentication information, particularly when passwords are stored without additional protection such as hashing. The data may then be shared or sold without the knowledge of the affected organization.

BannerBit and its sector

BannerBit operated as an online advertising platform. Companies in this sector maintain accounts for advertisers and publishers, which requires the collection of contact details and login credentials to manage campaigns and billing. A breach at such a service can affect individuals and businesses that rely on the platform for digital marketing activities, though the precise scope of BannerBit’s user base remains undisclosed.

What was likely exposed

The records provided to Have I Been Pwned included email addresses and passwords stored in plain text. Public information does not specify whether additional fields such as names, addresses, or payment details were present. Organizations of this type routinely hold account identifiers and authentication data; however, the exact contents of the BannerBit data set beyond the two fields named remain unconfirmed.

The real-world impact

Individuals whose email addresses and plain-text passwords were exposed face the possibility that the credentials could be tested against other online services. Because the passwords were not hashed, they could be used directly if reused elsewhere. BannerBit itself has not published information on remedial steps taken after the incident, leaving affected users without official guidance from the company.

What to do if you're exposed

Anyone who used BannerBit should change the password associated with that account and any other service where the same password was reused. Enabling multi-factor authentication on important accounts adds a further layer of protection. Readers can run a free exposure scan of their email address against known breach data to determine whether their information appears in this or other incidents.

AICompiled with AI assistance from public sources and published under our editorial standards.