Personal data of 40 million Wishbone app users hacked
The Wishbone user database has been leaked in full, according to a
Earlier, the data was being offered for 0.85 bitcoin ($8,000) on the Dark Web.
The data contains usernames, emails, phone numbers, city/state/country and
"The data also included links to Wishbone profile pictures. URLs included in the sample data loaded images depicting minors, an age category the Wishbone app has always been historically popular," according to the report.
The passwords were not stored in plain text but hashed using the
MD 5 was declared "cryptographically broken" by the experts in 2010.
A moderately-complex password hashed with MD5 could be cracked in 30 minutes or less.
ShinyHunters is currently selling databases from tens of other companies, totaling more than 1.5 billion records.
The companies include online dating app Zoosk, US newspaper Star Tribune and food delivery service Chef that contains over 73 million user records over the Dark Web for $18,000 (nearly Rs 13.6 lakh) .
AdvertisementOther companies are printing service Chatbooks, South Korean fashion platform SocialShare, online marketplace Minted, online newspaper Chronicle of Higher Education, South Korean furniture magazine GGuMim, health magazine Mindful and Indonesia online store Bhinneka.
ShinyHunters is the same group behind breaching private repositories on Microsoft-owned
On May 20, our team became aware of a security issue where we believe an unauthorized individual may have had access to Wishbone’s database through stolen credentials. Personal information for some of our users was compromised. No financial or other sensitive information was involved. We have since invalidated any current access methods to user information and updated keys accordingly, and we've also ensured that all employees or services which require access use cybersecurity approved multi-factor authentication or similar methods. Across the board, we are implementing stronger security and encryption of personal information to ensure the safety of all of our users’ data. We value our users' privacy and deeply regret that this has happened.
Popular on BI
- High-Yield Savings Accounts
- Electric bike-sharing platform Yulu Bikes raises $19.25 million
- Veteran singer Suresh Wadkar receives Lata Mangeshkar Award
- Former Lok Sabha speaker Manohar Joshi passes away at 86
- Which countries are most affected by severe seismic activity? New earthquake metric provides fresh perspective