FotoComputer

We noticed a recent resurgence of activity surrounding a dataset originally surfaced in August 2018, pertaining to the now-defunct Italian technology news platform, FotoComputer. What struck us was the persistent availability and apparent utility of this older breach data, particularly given the inclusion of plaintext passwords. This re-emergence suggests continued exploitation, underscoring the enduring risk posed by legacy credential exposure, even from seemingly inactive or defunct entities. The sheer volume of compromised accounts, while not astronomical, is significant enough to warrant attention for potential credential stuffing attacks targeting associated services.

The FotoComputer breach, discovered on August 26, 2018, involved a database compromise that exposed approximately 24,950 unique records. The leaked data primarily consists of email addresses and, critically, plaintext passwords. This direct exposure of credentials without any form of hashing or salting represents a significant security lapse. The compromised information was subsequently disseminated on a popular hacking forum, indicating a deliberate effort to monetize or weaponize the stolen data. The nature of the data suggests the breach was likely a direct database exfiltration, potentially through SQL injection or compromised administrative credentials. The presence of this data in a combolist format further highlights its intended use for automated credential stuffing campaigns against other platforms.

While specific contemporaneous news coverage for this particular breach might be limited given its age and origin from a regional platform, the general phenomenon of credential stuffing attacks stemming from such leaks is well-documented. Security researchers have consistently highlighted the dangers of plaintext password storage, with numerous reports detailing how breaches from years prior continue to fuel ongoing cybercrime. The continued availability of such datasets on dark web forums is a testament to the persistent threat landscape where older vulnerabilities and data exposures are continuously leveraged by threat actors.