Cyber Risks · Krebs on Security

Cupid Media Hack Exposed 42M Passwords

Summary: An intrusion at Cupid Media, a Southport, Australia-based niche dating service, exposed more than 42 million consumer records including names, email addresses, unencrypted passwords and birthdays, in a breach the company says it detected in January 2013. Managing director Andrew Bolton said the company notified affected customers and reset passwords for a group of accounts at the time, and has since implemented hashing and salting of passwords, while noting that a large portion of the records related to old, inactive or deleted accounts.

Why it matters: The stolen database sat on the same server as tens of millions of records taken from Adobe, PR Newswire and the National White Collar Crime Center, and because so many people reuse passwords, the plain-text credentials can hand thieves access to email inboxes and other sensitive sites tied to a user's address.

Read the original at Krebs on Security ↗

Topics
Data Breaches
Related