![]() We encrypted the passwords in md5 + and Upload He sent me the whole dump - email, password hashed and in clear text. 09:30: I opened an E-Mail about a potential data breach, including samples (email and hashed passwords), got in contact with the sender to proof the data.10:05: Website has been taken offline to prevent further access.10:17: Changing SSH- and Database passwords again (134bits, as usual).11:35: Reporting to the local data protection authority ().19:00: Still analysing the data, comparing users and timestamps, also hoster prepared the e-mail server for sending out the information mail. ![]() Information-Mail goes out to all records from the dump, soon. Last email entry has "" as registration date.
0 Comments
Leave a Reply. |
Details
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |