MediaWorks Data Breach (2023)

On March 15, 2023, New Zealand media company MediaWorks appeared in a breach notification on Have I Been Pwned, confirming that data belonging to 163,000 individuals had been exposed. The records, originally collected from people entering the company’s online competitions, were later posted publicly to a popular hacking forum in March 2024, after which some affected people began receiving direct ransom demands demanding payment in exchange for deletion of their information.

Reported Details from the Disclosure

The primary listing on Have I Been Pwned states that the compromised dataset contained 163k unique email addresses along with names, physical addresses, phone numbers, dates of birth, genders, and the specific responses individuals gave to competition questions. The disclosure does not specify the exact initial intrusion method or the precise date the data was first taken. It does confirm that the information originated from competition entry forms on MediaWorks properties and that a copy of the material eventually surfaced on a public hacking forum.

Some victims later reported receiving extortion emails that referenced their specific personal details and demanded payment to prevent further release or to delete the records. The leak-site posting itself did not include a formal ransom demand attached to the entire dataset, but the subsequent targeted messages indicate that at least portions of the information were being actively exploited for individual extortion.

Why This Matters for You and Your Family

If you or anyone in your household entered a MediaWorks competition between roughly 2014 and 2022, your full contact details and date of birth are now loose on the internet. This combination makes it straightforward for criminals to attempt identity theft, open accounts in your name, or impersonate you to family members and colleagues. Because the data includes physical addresses and phone numbers, the risk extends beyond online fraud to real-world harassment or burglary planning.

Children and teenagers who used a parent’s email address for competition entries are also exposed. A criminal who obtains a minor’s date of birth, gender, and linked parental contact information can begin building long-term profiles that may be sold or used years later. The fact that some victims have already received ransom demands shows the breach has moved from passive leakage into active, targeted abuse.

The Doxxing and Identity-Chain Implications

Once an attacker holds your name, address, phone, date of birth, and email, the next step is almost always correlation with other leaked datasets. A single competition entry can become the anchor record that links your gaming username, social-media handles, and family members’ accounts. This is exactly how doxxing chains form: one breach supplies the real-world identity, subsequent leaks supply the online personas, and the attacker ends up with a complete map of your digital life.

Credential-stuffing attacks become far more dangerous because the attacker already knows which email belongs to which person and can target password-reset flows with convincing personal details. Gaming accounts belonging to you or your children are particularly vulnerable; many use the same email address listed in the MediaWorks breach. A takeover there can expose chat logs, location data from in-game events, and friendships that lead to further social engineering.

What to Do

• Run a DoxxScan to map every link between your handles, emails, phone numbers, and real-world identity, then use the cleanup of Warden to remove what you can.
• Rotate any password you ever used on a MediaWorks competition page anywhere else it is reused, and switch to 2FA through an authenticator app rather than SMS.
• Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next time your information appears it is caught and acted on within hours.
• Cover the entire household with DoxxScan family coverage, which extends protection to dependents and children’s gaming accounts that often chain back to the same address and parental email.
• Let remediation specialists handle ongoing takedown requests for any new exposures of your data on forums or broker sites.

The MediaWorks breach is a clear reminder that data collected for seemingly harmless promotions can later fuel serious extortion and identity crimes. Acting quickly on the exposed information limits how far criminals can take the chain. DoxxScan’s continuous monitoring, AI-powered identity-chain mapping, hands-on remediation by specialists, and household coverage including children’s gaming accounts gives families the practical tools needed to close those doors before damage spreads further.