Personal data from nearly 40 million users of popular voting app Wishbone has been hacked which is available for free download on a hacking forum. Earlier, the data was being offered for 0.85 bitcoin ($8,000) on the Dark Web. The data contains usernames, emails, phone numbers, city/state/country and hashed passwords.
The passwords were not stored in plain text but hashed using the MD5 algorithm. MD 5 was declared “cryptographically broken” by the experts in 2010. ShinyHunters is the same group behind breaching private repositories on Microsoft-owned GitHub (the hacker is believed to have acquired around 1,200 private repositories) and Tokopedia, Indonesia’s largest online store where a database of over 90 million user records was sold.
