LeakedSource has added to its search index the passwords of Dailymotion users who were apparently compromised in October, possibly because of an insecure web application, reports Help Net Security. This includes more than 87 million email addresses and 18 million passwords plus user IDs of the video-sharing platform.
LeakedSource, a breach notification service that provides information on hacked passwords, says the passwords are protected by bcrypt and will not be easy to crack, but Dailymotion, though not confirming the breach, has asked users to practice caution by resetting them.
Cybersecurity experts have advised victims to be on the lookout for more attacks, especially phishing.
“Often times following a breach, cybercriminals will send out fraudulent messages purporting to come from the affected organization, in a last ditch attempt to retrieve valuable data from users,” said Vishal Gupta of Seclore to Help Net. “This data is then used to carry out additional attacks, often targeted at bank accounts, healthcare portals, and other sources of sensitive information,” he added.
Read more details here.