Personal data of 40 million Wishbone app users hacked

Personal data from nearly 40 million users of popular voting app Wishbone has been hacked which is available for free download on a hacking forum. Earlier, the data was being offered for 0.85 bitcoin ($8,000) on the Dark Web. The data contains usernames, emails, phone numbers, city/state/country and hashed passwords.

The passwords were not stored in plain text but hashed using the MD5 algorithm. MD 5 was declared “cryptographically broken” by the experts in 2010. ShinyHunters is the same group behind breaching private repositories on Microsoft-owned GitHub (the hacker is believed to have acquired around 1,200 private repositories) and Tokopedia, Indonesia’s largest online store where a database of over 90 million user records was sold.