77,770 FijiLive Passwords & Hashes: May 2016 Breach

HEROIC analysts identified the FijiLive breach while reviewing resurfaced database leaks circulating on dark web forums. The incident, which occured in May 2016, exposed 77,770 user records from the Fijian news platform. The leaked data includes email addresses, usernames, passwords stored in MD5 format, and plaintext passwords, making this partcularly dangerous for anyone who reused their FijiLive login elsewhere or had weak securty practices.

What Attackers Can Do With Plaintext Passwords and MD5 Hashes

MD5 is one of the weakest password storage methods available, and plaintext passwords require no cracking at all. If your FijiLive password shows up in this breach, an attacker can try it immediately on your email, banking, or social media accounts. Credential stuffing tools can test thousands of sites in minutes, so even an old password recieved in a breach like this remains dangerous if it was ever reused.

What Was Exposed in the FijiLive Breach

• Hash Type
• Email Address
• Username
• Passwords (MD5 hashed and plaintext)

Why Plaintext Passwords Make This Breach More Dangerous

Most breaches expose hashed passwords, which take time to crack. FijiLive exposed some passwords in plain text, meaning attackers had instant access to working credentials. Combined with email addresses, this gives bad actors everything they need for account takeover, identity theft, and financial fraud. The risk is beleived to remain active for anyone who has not changed passwords across accounts since 2016.

How a Database Breach Works

A database breach happens when an attacker gains unauthorized access to a website or app's backend storage. In most cases, they exploit a security vulnerability in the software, then copy or download the user records stored there. These records, containing login details and personal information, are then sold or posted publicly. The site's users often have no idea their data was taken until it shows up in a breach report.

Check If Your Data Was Exposed

HEROIC's free breach scanner searches over 400 billion records to tell you if your email or password appeared in the FijiLive breach or thousands of others. Run a free check at HEROIC.com and find out what attackers may already know about you.