Dolphin {anty} Low severity Incident: November 2021

Dolphin {anty}: password brute-forcing against user accounts, November 2021

On November 3, 2021, Dolphin {anty} reported that attackers were trying to guess users’ account passwords.

Attack with no confirmed breachNovember 2021

What happened

Company did not publish the outcome of the attack

On November 3, 2021, Dolphin {anty} reported that attackers were attempting to guess passwords for user accounts on the service. The company limited logins to two attempts from a single IP address, after which the address was temporarily blocked. The company did not disclose whether any accounts had been compromised.

Who was affected

unknown

Losses

not reported

What the company did

It limited logins to two attempts from a single IP address and temporarily blocked addresses after that limit was exceeded. It advised users who were unable to log in to change their IP address. The company did not disclose when the restriction was lifted or how the attack ended.

Our editors collected and checked the sources; the text says who gives each figure.

Published October 10, 2026 Checked October 10, 2026

Company response or correction

Do you represent Dolphin {anty} or have you spotted an inaccuracy? Send us a response or correction with a source link, and we’ll publish it in the “What the company did” section.

How we count incidents. We count breaches and leaks on the service’s side, attacks through updates and extensions, account takeovers, and hacking attempts reported by the company itself. Brand impersonation, unverified complaints, patched vulnerabilities that were not exploited, DDoS attacks without data leaks, and account bans by platforms are not included in the incident count; they appear in the “Worth knowing” section. Checked October 10, 2026.