Dating site passwords stolen
You can follow any comments to this entry through the RSS 2.0 feed. Members of dating site Match.com, which has millions of subscribers across 25 countries, are at risk of having their passwords exposed.Protecting our customer’s privacy and data is important to us and we will continue to make additional investments in improved security for our members.We sincerely apologize for the inconvenience this has caused our members.
It's because the login page doesn't use HTTPS encryption to keep its users safe, Ars Technica explains.Holden added that this database would be a gold mine for spammers, noting that Cupid’s customers are probably more primed than most to be responsive to the types of products typically advertised in spam (think male enhancement pills, dating services and diet pills).Bolton adopted a softer tone in the second half of his email, indicating that the company may not have understood the full scope of the intrusion.“It comes to down to the definition of users versus individuals who entrusted their data to a service.” The danger with such a large breach is that far too many people reuse the same passwords at multiple sites, meaning a compromise like this can give thieves instant access to tens of thousands of email inboxes and other sensitive sites tied to a user’s email address.
Indeed, Facebook has been mining the leaked Adobe data for information about any of its own users who might have reused their Adobe password and inadvertently exposed their Facebook accounts to hijacking as a result of the breach.Alex Holden, chief information security officer at Hold Security LLC, said Bolton’s statement is reminiscent of the stance that software giant Adobe Systems Inc. In that case, a database containing the email and password information on more than 150 million people was stolen and leaked online, but Adobe says it has so far only found it necessary to alert the 38 million active users in the leaked database.