breach analysis: CoinBulb
intro
victim name: CoinBulb
victim url: www.coinbulb.com
victim description:
Coinbulb is a paying bitcoin PTC where you can earn bitcoin online by viewing ads and advertise to receive quality traffic.
victim category: cryptocurrency,pay-to-click
the breach
breach date: unknown
compromised data: emails,usernames,password,account balances
compromised accounts: 553,443
password hashing algorithm: plaintext
breach acknowledged by the victim? no*
* victim acknowledged abnormal user logins
statistics
breach publicity:
| service | present? |
|---|---|
| have i been pwned | no |
| we leak info | no |
| dehashed.com | no |
| breach alarm | no |
top 10 used email providers:
| 414312 | gmail.com |
| 41276 | yahoo.com |
| 33769 | hotmail.com |
| 9386 | mail.ru |
| 5163 | yandex.ru |
| 4876 | outlook.com |
| 1891 | live.com |
| 1336 | icloud.com |
| 1229 | ymail.com |
| 1002 | ukr.net |
top 10 used passwords:
| 1374 | 123456 |
| 1257 | 123456789 |
| 952 | 12345678 |
| 848 | <blank> |
| 473 | 1234567890 |
| 335 | coinbulb |
| 290 | fahad123 |
| 288 | pakistan |
| 286 | 12345 |
| 279 | bilbobigins |
conclusion
breach severity: HIGH
using plaintext is unforgivable in 2018.