Lorenzo Franceschi-Bicchierai writing for Motherboard:
The personal information of almost 5 million parents and more than 200,000 kids was exposed earlier this month after a hacker broke into the servers of a Chinese company that sells kids toys and gadgets, Motherboard has learned.
The hacked data includes names, email addresses, passwords, and home addresses of 4,833,678 parents who have bought products sold by VTech, which has almost $2 billion in revenue. The dump also includes the first names, genders and birthdays of more than 200,000 kids.
Troy Hunt provided some insight on the VTech process to gather the data: informations are sent over plain HTTP, no SSL involved. Passwords are digested with MD5, not even salted. The information of the children and their parents are easily linkable.
Monday, November 30, 2015
Copyright © 2015-2018 Selected Links | RSS | Twitter | Linked list