Cybercrooks trawl Fishbrain to net password hashes
Armed with password hashes and salts, attackers could already be kraken those creds
Cybercriminals hijacked user data from the popular fishing app Fishbrain, gaining access to password hashes and salts for users of the platform. Fishbrain, which claims to serve more than 20 million anglers, reported the breach to the California Attorney General's Office this week. The thieves obtained personal information such as names, dates of birth, email addresses, phone numbers, usernames, country details, password hashes, and salts.
Although Fishbrain's passwords were not stored in plain text, it revealed that some compromised password hashes could potentially be decoded. The company advised users to update their passwords for other online accounts using the same credentials, as well as to use strong, unique passwords for each account. Fishbrain patched the vulnerability after discovering the intrusion, reset all user passwords, and initiated a review of its data security measures. Users were advised to stay vigilant for phishing attempts using the stolen personal data.
Written by urgent.news from The Register's reporting — not their text. Machine-written — may contain errors; check the original before relying on it.
Also reported by 1 other outlet
- Cybercrooks trawl Fishbrain to net password hashes theregister.com
