Forum database hacked/leaked, usernames/email addresses, etc.

[toysareforboys]

The VideoHelp user database is available for purchase on the darkweb

I didn't see any notification from videohelp, not sure if this is the first time you've heard about it.

Better let users know to change their passwords, including their e-mail passwords if they were using the same one as this forum.

-Jamie M.

[El Heggunte]

The VideoHelp user database is available for purchase on the darkweb

Could you please share some screenshots

[johns0]

I doubt that unless you can show evidence and there's no such thing as the dark web,just dark people using the web.

[aedipuss]

I doubt that unless you can show evidence and there's no such thing as the dark web,just dark people using the web.

oh no, just because you don't know or believe in it doesn't mean it doesn't exist. lots of things on the dark web no one really wants to know of, but it exists... and it's nasty.

[godai]

better never know about that.
hope its wrong.

[Baldrick]

I have had the same user database for 20 years. When was it leaked?

I have searched some unique emails from our database and they are not yet listed in https://haveibeenpwned.com/

I will not purchase anything from darkweb to verify this...

And ALWAYS use a two-factor authentication for you main email service.

[butterw]

Using the same password for email and forums/websites is a security risk.

[Baldrick]

And the user passwords are not stored as plain text. They are encrypted with a salt so it's NOT that simple to decrypt them or find them in password hash lists. But not impossible.

[El Heggunte]

And the user passwords are not stored as plain text. They are encrypted with a salt so it's that simple to decrypt them or find them in password hash lists. But not impossible.

Thanks for the useful post *THUMBS UP*
Anyway, I changed my VH password after almost 12 years , just in case

[DB83]

Would just the pwd for this site make a diff ?


Surely the whole point of hacking in to the database would be to reveal the emailaddr and send unsolicited 'garbage' without even knowing the pwd.


The link from the guy with a 'cunning plan' was useful.


I checked that against my contact email for a website that I run (totally unconnected with anything I write here) and was advised that the addr was subject to a data breach (hosted at hostgator)


Which might explain why I was getting spam and other crazy messages (which have now stopped since I added even more anti-spam control -beyond captcha - to the contact form and it's subsequent mailer)

[Baldrick]

And the user passwords are not stored as plain text. They are encrypted with a salt so it's that simple to decrypt them or find them in password hash lists. But not impossible.

Thanks for the useful post *THUMBS UP*
Anyway, I changed my VH password after almost 12 years , just in case

I forgot a NOT. It's not that to simple to decrypt the password.

[Baldrick]

I was wondering if someone from videohelp was involved in the database leaking. In the last few years, data leaking has become the biggest data security problem that many corporations encounter. Your personal data (phone number, email, address, credit cards) isn't protected once it goes online. To keep your own organization/business out of the news, it’s important to understand the most common causes of data breaches and what you can do to mitigate the threats they present:

1. Weak/Stolen Credentials
2. Malware
3. Too Many Permissions
4. Physical Attacks
5. Boost productivity with crm data enrichment

Bye bye you f***cking spammer!!!!!!