Troy Hunt, the creator of the compromised password checking service 'Have I Been Pwned' (haveibeenpwned.com), received information about a leak of the user database from the Internet Archive (archive.org), which maintains an archive of web pages and the largest library of digitized content. The attackers provided Troy with an SQL dump that includes the accounts of 31 million users from archive.org. Additionally, a JavaScript code was injected into the archive.org site, displaying a pop-up window with information about the breach.
The warning about the leak has been forwarded to the archive.org administration, but no official statements or explanations have been published yet (only retweets on Twitter so far). The SQL dump of the service database that fell into the hands of researchers is over 6 GB and includes user password hashes in bcrypt format, the password change timestamp, email, and username. The most recent record in the database is dated September 28.
The relevance of the database was confirmed by well-known security researcher Scott Helme, whose password hash and change timestamp from the leaked SQL dump matched the data from his password manager. Users can check if their accounts have been compromised through the service haveibeenpwned.com, which has already incorporated information from the leaked archive.org database. In general, the check on haveibeenpwned.com covers 14 billion passwords and includes information about breaches of 817 websites.
Source: opennet.ru
