Hackers Hack and Publish 11 Million Gamer,Last.fm and LinkedIn Passwords Online

A user at password-hacking forum Inside Pro earlier this month published a half-gigabyte file that contained as many as 11 million passwords collected from users at the popular German gaming site Gamigo, Forbes reports. Even though the file containing the passwords has been removed from the forum, Forbes says the damage may have already been done since the file was available for weeks before being taken down.

Steve Thomas, the founder of data breach warning service PwnedList, told Forbes that the published passwords represent “largest leak I’ve ever actually seen,” although he said that he could only count 8.2 million unique email addresses and passwords in the file rather than the 11 million claimed by the original leaker. Gamigo had apparently warned its users months ago that their accounts may have been compromised by hackers, although this past month marked the first time that its users’ email addresses and passwords had been published.


Last.fm Password Hacked : Last.fm says user passwords were leaked
Custom Internet radio provider Last.fm on Thursday confirmed that passwords belonging to an unspecified number of it users have been compromised. ”We are currently investigating the leak of some Last.fm user passwords,” the company said in a statement on its website. “This follows recent password leaks on other sites, as well as information posted online. As a precautionary measure, we’re asking all our users to change their passwords immediately.” The news comes just one day after LinkedIn confirmed an attack that saw passwords belonging to nearly 6.5 million members posted on the Web. Last.fm recommends that all of its users change their passwords immediately.

LinkedIn Password Hacked : Hacker steals more than 6 million passwords from LinkedIn [updated]
A Russian forum member claims to have stolen 6.46 million encrypted LinkedIn passwords and posted them online, according to Finnish security firm CERT-FI. The passwords are encrypted with SHA-1, and although it is very secure, around 300,000 of the weaker passwords may have already been exposed.



The social networking site announced on Twitter that it is looking into the incident. “Our team is currently looking into reports of stolen passwords,” the company said. “Stay tuned for more.” It is recommended that LinkedIn users change their passwords as a precautionary measure.

UPDATE:
LinkedIn has confirmed the breach in a post on its blog, and stated that “some” passwords were compromised.

No comments:

Post a Comment