Over 21,000 plain text passwords allegedly stolen from Billabong

Billabong may have joined Yahoo as the latest company that has been found to store its users’ passwords in plain text, with hackers claiming to have leaked the system information for Billabong’s site and the log-in details for over 20,000 customers.

In a post, placed on a popular code sharing site, hackers claimed to have exposed the root information for Billabong’s network, the usernames and passwords for its MySQL databases and information on over 21,000 user accounts.

The user account information include email addresses and passwords, which were stored in plain text. The hackers claimed to have leaked 20,000 to 35,000 accounts, but the list, ordered alphabetically, stops mid-way, at email addresses beginning with “marc”. Nevertheless, the information for a total of 21,435 users is now in the wild.

Although the leak appears to contain enough information to cause significant damage to Billabong’s servers, the company’s site was still standing at the time of writing, even though close to a thousand users had already seen the post. This could indicate that Billabong may have already taken action to change its own passwords.

ZDNet Australia contacted Billabong to determine if it was aware of the information leak, but had not received a response at the time of writing.

This alleged breach echoes those at Formspring, Yahoo and Phandroid, which occurred in the second half of this week, and, a few weeks prior, LinkedIn, eHarmony and Last.fm was targetted (the latter of which is owned by CBS, the parent company of ZDNet).

The leak of information is already affecting Best Buy, which confirmed that, due to its customers re-using credentials across multiple websites, the breaches had enabled malicious parties to fraudulently purchase gift cards.

You can skip to the end and leave a response. Pinging is currently not allowed.

Leave a Reply

Powered by WordPress | Designed by: Premium WordPress Themes | Thanks to Themes Gallery, Bromoney and Wordpress Themes