In an interview with Motherboard, Impact Team, the hacking group that breached the Ashley Madison website, revealed that it still has 300GB of unreleased data.
The Ashley Madison hack was announced in July, and the group said it would not release the stolen data if the website was shut down.
This apparently did not happen, and the hackers initially released 10GB of data containing the website's customer details, and later another 20GB containing internal emails and the site's source code.
In response to questions from a Motherboard editor, the hackers revealed that Ashley Madison had no security measures in place, and that the administrators were so foolish as to use the root password on their servers as: “Pass1234.”
This allowed hackers to gain complete control of all servers, and to freely download all customer data, private conversations, photos, credit card details, financial data, the website's source code, and many other internal data.
To date, 30GB of data has been leaked and, as the group claims, there are still 300GB that will be leaked only if the company Avid Life Media does not shut down the Ashley Madison website.
The hackers' motivation does not appear to be financial and they can probably be considered hacktivists rather than extortionists for financial gain.
