It’s one of the largest breaches of all time

It’s one of the largest breaches of all time

Follow MUO

AdultFriendFinder, which calls itself „the world’s largest sex and swinger community,“ got hit, and over 410 million account details, including email addresses and passwords, have been posted online.

Less than 18 months ago, the extramarital-affair-enabling website Ashley Madison had a huge data breach. Data from over 30 million accounts was posted online, and there was a flurry of shaming and finger-pointing all over the internet. You’d think the industry would have learned.

Alas, it did not. A similar website, AdultFriendFinder, which calls itself „the world’s largest sex and swinger community,“ got hit, and over 410 million account details, including email addresses and passwords, have been posted online.

What Happened This Time?

In October, AdultFriendFinder and multiple sister sites (including Cams and Penthouse) were attacked. Websites under the control of Friend Finder Networks, the parent company, were vulnerable to a type of attack called local file inclusion. This attack gave hackers access to a number of Friend Finder databases, including billing information, member lists, and chat logs.

Friend Finder was also hacked last year, and the details of four million accounts was released. It appears they didn’t upgrade their security. This attack is much, much worse.

Among the information posted online were email addresses and passwords that hadn’t been securely encrypted, meaning that hackers could actually see plain text details. Obtaining an encrypted password won’t do an attacker much good, but actually obtaining email addresses and passwords not only compromises the identity of users, but also opens them to further attacks. Pokračovat ve čtení „It’s one of the largest breaches of all time“