Security researcher Brian Krebs has discovered a database containing email addresses, passwords, names, and dates of birth from Cupid Media. Unfortunately, all of the passwords the researcher discovered are in plain text.
The attack on Cupid Media likely occurred in January 2013. At the time, the company notified its members to reset their passwords. However, the incident was not disclosed to the general public.
The company's CEO, Andrew Bolton, told Krebs that when the breach was discovered, they hired a firm to implement additional security measures, including encryption on passwords.
Bolton claims that many of the files in the database leaked by the hackers are old, inactive, or have been deleted. However, he promised that the company will investigate the incident further based on this new information.
It should come as no surprise that many of Cupid Media's customers had very easy passwords. 1.9 million people used "123456" as their password, and 1.2 million used "111111.".
The most popular non-numeric passwords are: “iloveyou”, “lovely”, “qwerty”, “password”, “AZERTY” ” loveme”, “aaaaaa”, “MyLove” “iloveu” and “zxcvbnm.”
