Care2 resets millions of account credentials following security breach

Care2, a social network that promotes animal welfare, women's rights, healthy living and a lot of other causes, has reset the account credentials of millions of its users following an information security breach of its systems over the vacations.

Care2 might not was storing passwords securely.

“Rather than storing passwords as a salted cryptographic hash that might not reveal their customers passwords if stolen (or make it a lot more difficult), they're storing them either in plaintext or in a reversible format,” Wisniewski wrote within the Sophos Naked Security blog.

Wisniewski said the Care2 breach is a reminder that folks should reassess where they share their personal information and use unique passwords at every site that requires a login. Security experts say account credentials was rising in value at the black market.  Cybercriminals use stolen passwords to access bank accounts and faucet into corporate networks, evading most conventional security technologies. 

Dig Deeper

• People that read this also read...