OhMedia
cleartext passwords

On November 7, 2011, TeamSwastika released over 60,000 accounts of OhMedia containing email and password combination. The group announced the release in a Twitter post at https://twitter.com/#!/TeamSwastika/status/133771658241638400. The table below is the list of these accounts. Several accounts with same email were found in the list but they appear to be using different passwords. We retain these supposedly duplicate accounts in the list below. OhMedia is a social network and advertising company based in Malaysia. Most of the accounts are believed to belong to users from Malaysia as well.

UPDATE (November 16, 2011): The passwords in the database were hashed using SHA1 (unsalted). This would have allowed anyone to easily crack them using freely available password cracking tools such as JtR. Many of the passwords were successfully acquired by feeding a password dictionary to JtR and the rest being acquired by using JtR incremental mode.

What should you do?
Use the search box below to find out if your email is in the list. If yes, you are advised to change your password immediately if it is still in use elsewhere. For your privacy, do not enter your complete email in the search box. Try using the first part of your email instead, e.g. example instead of example@example.com.

If you wish to have your entry removed from the list below, please send your request to disclosure@dazzlepod.com with subject "ohmedia removal request". The removal is usually done automatically within 48 hours if you use the same email as the one appeared in the list.

Comments/Questions? Send to disclosure@dazzlepod.com

Tweet