ClassPass, Gfycat, StreetEasy hit in latest round of mass site hacks
By Zack Whittaker | February 16th, 2019
In just a week, a single seller put close to 750 million records from 24 hacked sites up for sale. Now, the hacker has struck again.
The hacker, whose identity isn’t known, began listing user data from several major websites — including MyFitnessPal, 500px and Coffee Meets Bagel, and more recently Houzz and Roll20 — earlier this week. This weekend, the hacker added their third round of data breaches — another eight sites, amounting to another 91 million user records — on their dark web marketplace.
…
From the samples that TechCrunch has seen, the accounts include some variations of usernames and email addresses, names, locations by country and region, account creation dates, passwords hashed in various formats, and other account information.
…
To date, the hacker has revealed breaches at 30 companies, totaling some 841 million records.
Little is known about the hacker, and it remains unclear exactly how these sites were hacked.
Read the full article here
