Q&A regarding Neighbourly data breach 03/01/2025

What has Neighbourly done in response to the breach?Once we were made aware of a potential data breach on January 1, we took the immediate and proactive action to temporarily take down the site whi...

Neighbourly

@norightturnnz The focus has been on #ManageMyHealth #DataBreach but I'd like more information on the supposed #Neighbourly data breach too.

That one (if real) included names, email addresses, phone numbers, physical addresses and any posts people made. Potentially a lot of personal information and dangerous #NZPrivacy fail.

Neighbourly users' private information up for sale on dark web after a breach

<<Neighbourly has told its members it will look to seek a court injunction against the use of any of the material, but said it was satisfied the breach was quickly contained.>>

These guys are crooks how does Neighbourly expect them to obey a court injunction?

https://www.rnz.co.nz/news/national/583124/neighbourly-users-private-information-up-for-sale-on-dark-web-after-a-breach

#RNZ #NZ #Neighbourly #Security #DataBreach

Neighbourly users' private information up for sale on dark web after a breach

Neighbourly is back online after it was shut down on New Year's Day when its operators became aware of a data breach.

RNZ

NZ Community social networking and advertising platform #Neighbourly has confirmed a #DataBreach affecting some of its users. Another NZ #infosec issue.

Names, email addresses, GPS coordinates, some phone numbers, public forum posts and direct member communications were accessed without authorisation in the breach, a spokesperson said on Saturday. Passwords were not compromised.

The website is now up again. Neighbourly hasn't identified whose details were accessed so it may be worth users checking information and checking for what they may want to change on the site or IRL. E.g. I've changed phone numbers.

https://www.stuff.co.nz/nz-news/360920404/neighbourly-confirms-data-breach-affecting-user-information

Stuff

Stuff

Stuff's Neighbourly site has suffered a data breach. There're no details of the scale or damage yet but the site has been taken down.

https://www.stuff.co.nz/nz-news/360920154/neighbourly-informed-potential-data-breach

#DataBreach #Neighbourly

Stuff

Message on #Neighbourly re #DataBreach rumours

"We have become aware this evening of claims that Neighbourly has been affected by a data breach. Out of an abundance of caution, we have taken the site down while our external cyber security team investigates the claims, and we have notified authorities.

As you may be aware, the holiday period is a time when scammers can be particularly active as people are busy and distracted. Phishing attempts — via email, texts and calls - increase and it is important to avoid clicking on unexpected messages.

At Neighbourly we take our data privacy responsibilities extremely seriously and we will keep you updated as more information becomes available.

Ngā mihi,
The team at Neighbourly"

Another NZ #DataBreach I'd missed - #Neighbourly! #InfoSec

The allegedly compromised data includes:
- Full names
- Email addresses
- Phone numbers
- Physical addresses and verified Neighborhood IDs
- GPS Coordinates (Latitude and Longitude)
- Biographies
- Account status details (isActive, isRegistered, isVerified)
- Private messages and forum posts (including subjects and body text)
- User timestamps (registeredAt, createdAt)

Website is unavailable and gives this message
"Backend unavailable, connection timeout"
Or 503, or other error message.

https://dailydarkweb.net/neighbourly-data-breach-150gb-of-user-data-and-messages-put-for-sale/

Neighbourly Data Breach: 150GB of User Data and Messages Put for Sale - Daily Dark Web

Neighbourly Data Breach: 150GB of User Data and Messages Put for Sale Discover the latest security threats and database leaks, including unauthorized VPN access and email breaches, in the cyber underground world.Stay informed about emerging cyber threats, such as unauthorized access to databases and sensitive information leaks, affecting global companies and organizations.Learn about the latest cyber incidents, including DDoS attacks and malware threats targeting cryptocurrency wallets and financial institutions.

Daily Dark Web

(2/2)

Among existing tech that could be used for a hyperlocal social service, maybe something like Hometown?

https://github.com/hometown-fork/hometown

See also the keynote @darius prepared for the online-only #APConf in 2020;

https://socialhub.activitypub.rocks/t/lets-play-and-win-our-own-game/953

Or maybe Bonfire Community, or a @bonfire flavour specifically for the purpose?

https://bonfirenetworks.org/app/community/

#localism #NewUrbanism #5MinuteCities #Hometown #Bonfire #Neighbourly

GitHub - hometown-fork/hometown: A supported fork of Mastodon that provides local posting and a wider range of content types.

A supported fork of Mastodon that provides local posting and a wider range of content types. - hometown-fork/hometown

GitHub

@aimee
> I was one of the early neighbourli peeps back when it was still cool but then Venture Capital etc wrecked it

Enshittification is a thing. But it would have been harder to pull Neighbourly down that road if it had been a piece of Free Code software. Hosted locally by groups using it, or maybe on a city/ district scale by co-ops of local groups within that area. Ideally federated, so people can move their account when they change neighbourhoods, etc.

#Neighbourly