Have I Been Pwned warns of DatPiff data breach impacting millions

guest · Jan 4, 2022

January 4, 2022

The cracked passwords for almost 7.5 million DatPiff members are being sold online, and users can check if they are part of the data breach through the Have I Been Pwned notification service.

DatPiff is a popular mixtape hosting service used by over 15 million users, allowing unregistered users to download or upload samples for free.
Click to expand...

The DatPiff data breach
It is unclear when the data breach occurred, but the DatPiff database was first sold privately and then publicly on hacking forums in July 2020.

The stolen DatPiff database contains 7,476,940 member records, including a user's email address, password, username, and security question.
The passwords in the database could be cracked because DatPiff hashed them with the MD5 algorithm, an old (1992) cryptographic hash function that is considered obsolete and insecure, especially for securing passwords.
Click to expand...

At the time of writing this, DatPiff hasn't published a statement on this data breach incident, hasn't sent any notices to users, and hasn't forced a password reset.
Click to expand...

Data has been added to Have I Been Pwned:

DatPiff – 7,476,940 breached accounts

DatPiff
In late 2021, email address and plain text password pairs from the rap mixtape website DatPiff appeared for sale on a popular hacking forum. The data allegedly dated back to an earlier breach and in total, contained almost 7.5M email addresses and cracked password pairs. The original data source allegedly contained usernames, security questions and answers and passwords stored as MD5 hashes with a static salt.

Breach date: 25 August 2021
Date added to HIBP: 4 January 2022
Compromised accounts: 7,476,940
Compromised data: Email addresses, Passwords, Security questions and answers, Usernames
Permalink
Click to expand...

Log in or Sign up

Have I Been Pwned warns of DatPiff data breach impacting millions

guest Guest

Log in or Sign up

Have I Been Pwned warns of DatPiff data breach impacting millions

guest Guest

Useful Searches