article thumbnail

Open Subtitles breach: The dangers of password reuse

Malwarebytes

“He gained access to all users’ data – email, username, password…He promised the data would be erased and he would help us secure the site after the payment. The site was created in 2006 with little knowledge of security, so passwords were stored in md5() hashes without salt”. Money troubles.