26 million LiveJournal credentials leaked online, sold on the dark web

guest · May 26, 2020

26 million LiveJournal credentials leaked online, sold on the dark web
LiveJournal credentials were obtained in a 2014 hack, but leaked online earlier this month
May 27, 2020
https://www.zdnet.com/article/26-million-livejournal-credentials-leaked-online-sold-on-the-dark-web/

Blogging platform LiveJournal appears to have suffered a security breach in 2014, according to multiple hackers who are now selling and freely trading the company's user database on the dark web and on hacking forums, ZDNet has learned.

For some, this might be old news. Rumors about a LiveJournal security breach have been circulating online for almost two years. The earliest talks appeared in October 2018 when multiple users reported receiving their unique/old LiveJournal passwords as part of sextortion email spam campaigns.
For the past months, DreamWidth, a blogging platform forked from the old LiveJournal codebase has also been under assault.

In a series of blog posts and tweets published over the past weeks, DreamWidth says it has been targeted by multiple credential stuffing attacks.
Click to expand...

But in spite of all the evidence supporting the fact that hackers have gained access to a large number of LiveJournal credentials, the Rambler Group, the company which owns LiveJournal, has declined to formally acknowledge a breach in its previous communications with DreamWidth administrators.

According to HIBP, the data contained the usernames, emails, and plaintext passwords of 26,372,781 LiveJournal users.
LIVEJOURNAL DATABASE HAS BEEN AROUND FOR MONTHS, YEARS
With the help of threat intelligence firm KELA, ZDNet has confirmed the existence of the LiveJournal stolen database and has tracked down copies and mentions of user data in multiple locations across the hacking underground.
Click to expand...

guest · May 27, 2020

LiveJournal – 26,372,781 breached accounts

LiveJournal
In mid-2019, news broke of an alleged LiveJournal data breach. This followed multiple reports of credential abuse against Dreamwith beginning 2018, a fork of LiveJournal with a significant crossover in user base. The breach allegedly dates back to 2017 and contains 26M unique usernames and email addresses (both of which have been confirmed to exist on LiveJournal) alongside plain text passwords. The data was subsequently shared on a popular hacking forum in May 2020 and redistributed broadly. The data was provided to HIBP by a source who requested it be attributed to "nano@databases.pw".

Breach date: 1 January 2017
Date added to HIBP: 26 May 2020
Compromised accounts: 26,372,781
Compromised data: Email addresses, Passwords, Usernames
Click to expand...

Log in or Sign up

26 million LiveJournal credentials leaked online, sold on the dark web

guest Guest

guest Guest

Log in or Sign up

26 million LiveJournal credentials leaked online, sold on the dark web

guest Guest

guest Guest

Useful Searches