funsurvey

We've observed a concerning trend of older, seemingly less impactful breaches resurfacing in underground communities, often repackaged and traded as "new" datasets. Our team recently encountered one such instance: a database linked to **funsurvey.com**, dating back to **May 2015**. What initially appeared to be a small leak quickly became more concerning upon closer inspection. The relatively low record count of just over **3,000** wasn't the issue; it was the presence of plaintext passwords that raised immediate red flags. This data, while old, still poses a risk to individuals who may have reused those credentials across different platforms.

The funsurvey Breach: Plaintext Passwords from a 2015 Database

The breach involved a database from funsurvey.com, a survey platform. The data surfaced on various dark web forums on or around May 25, 2015, and has recently resurfaced. While the overall volume of exposed records is relatively small at 3,262, the critical detail is the storage of user passwords in plaintext format. This significantly increases the risk of credential stuffing attacks, where these exposed credentials are used to attempt unauthorized access to other online accounts.

The presence of plaintext passwords immediately elevated this breach in our assessment. Modern security practices mandate hashing and salting passwords to protect them even in the event of a data breach. The lack of these basic security measures in 2015 indicates a significant security lapse at the time. The exposed data includes email addresses and plaintext passwords. The data was extracted from a database.

This breach matters to enterprises because it highlights the long-term risk associated with poor security practices and the continued relevance of older data breaches. Even seemingly insignificant breaches can have lasting consequences if the exposed credentials are still valid. It underscores the need for continuous monitoring of credential leaks and proactive password resets for potentially affected users.

• Total records exposed: 3,262
• Types of data included: Email Address, Plaintext Password
• Sensitive content types: PII
• Source structure: Database
• Leak location(s): Dark web forums
• Date leaked: 25-May-2015

While specific forum URLs are no longer readily available (given the age of the breach), discussions regarding the funsurvey.com breach and associated data dumps can still be found in archived forum posts and dark web marketplaces. The breach was also reported on Pastebin shortly after it occurred, further indicating its initial visibility. While not heavily covered by major news outlets, its presence in security communities was noted at the time. The risk from older breaches is still highly relevant, with attackers frequently targeting reused credentials, and this example highlights the importance of proactive monitoring of past breaches.