Reported F-Thies Breach: 1,333 Records, Emails and Passwords

HEROIC analysts logged a reported data breach listed under the name F-Thies, dated August 1, 2023. The record claims 1,333 entries and lists three items: an email address, a plaintext password and a password hash. The claim is unconfirmed, and scanning your email is the only way to learn whether your address appears.

Two Password Forms in One Record

The record names both a plaintext password and a password hash as listed items, without saying which entries carry which. A plaintext password can be read at once, and a hash is a scrambled copy whose method is not stated. Either form puts weight on whether the password was repeated on another sign-in. The record does not say whether a given entry carries one form or both, so every entry deserves the same caution.

The Three Items in the F-Thies Record

• Email addresses, the identifier behind each login and the destination for messages.
• Plaintext passwords, readable as written.
• Password hashes, scrambled passwords whose method the record does not name.

What Each Form Allows

A plaintext password can be tried as soon as it is read. A hash has to be reversed first, which takes effort that depends on the method behind it. Once either is recovered, the pair can be tried on other sign-ins, and the address can receive messages that borrow the F-Thies name. Neither form is safe to ignore, because the entry also includes the email address that ties the password to a person.

What a Database Label Describes

The label refers to entries reportedly taken from the stored data of an organization. It is not a statement about the people in the list or their devices. With the record marked unverified, the label rests on a claim.

Does Your Address Match an F-Thies Entry?

Put the question to the scanner: scan your email and see your information. A match calls for a new F-Thies password and a different one on every sign-in that repeated it. Run the lookup for the address you use at work along with your own.