In August 2020, the workout tracking app Jefit suffered a data breach. The data was subsequently sold within the hacking community and included over 9 million email and IP addresses, usernames and passwords stored as either vBulletin or argon2 hashes.
Breach date: 11 August 2020
Compromised accounts: 9,052,457
Compromised data: Email addresses, IP addresses, Passwords, Usernames
Code:
INSERT INTO `USER`
(
`userid`,
`usergroupid`,
`membergroupids`,
`displaygroupid`,
`username`,
`passworddate`,
`email`,
`styleid`,
`parentemail`,
`homepage`,
`icq`,
`aim`,
`yahoo`,
`msn`,
`skype`,
`google`,
`status`,
`showvbcode`,
`showbirthday`,
`usertitle`,
`customtitle`,
`joindate`,
`daysprune`,
`lastvisit`,
`lastactivity`,
`lastpost`,
`lastpostid`,
`posts`,
`reputation`,
`reputationlevelid`,
`timezoneoffset`,
`pmpopup`,
`avatarid`,
`avatarrevision`,
`sigpicrevision`,
`options`,
`privacy_options`,
`notification_options`,
`birthday`,
`birthday_search`,
`maxposts`,
`startofweek`,
`ipaddress`,
`referrerid`,
`languageid`,
`emailstamp`,
`threadedmode`,
`emailnotification`,
`pmtotal`,
`pmunread`,
`ipoints`,
`infractions`,
`warnings`,
`infractiongroupids`,
`infractiongroupid`,
`adminoptions`,
`profilevisits`,
`friendcount`,
`friendreqcount`,
`vmunreadcount`,
`vmmoderatedcount`,
`socgroupinvitecount`,
`socgroupreqcount`,
`pcunreadcount`,
`pcmoderatedcount`,
`gmmoderatedcount`,
`assetposthash`,
`fbuserid`,
`fbjoindate`,
`fbname`,
`importuserid`,
`gplususerid`,
`newrepcount`,
`token`,
`scheme`,
`secret`,
`autosubscribe`,
`privacyconsent`,
`privacyconsentupdated`,
`editorstate`,
`location`
)
VALUES
(
1,
6,
'',
0,
'Javastate',
'2020-05-03',
'admin@jefit.com',
0,
'',
'',
'',
'',
'',
'',
'',
'',
NULL,
2,
2,
'Administrator',
0,
1279999620,
0,
1591888387,
1591888387,
1589094389,
100539,
3,
2000,
15,
'-5',
0,
0,
4,
0,
481316086,
NULL,
939524090,
'',
'1000-01-01',
-1,
1,
'',
0,
0,
1590555910,
0,
0,
24,
0,
0,
0,
0,
'',
0,
0,
623,
21,
5,
2,
0,
0,
0,
0,
0,
0,
'7dae04572a9168b0e5fe3be76ae31f51',
'0',
0,
'',
0,
'0',
0,
'$argon2id$v=19$m=65536,t=6,p=1$POuuctRdo/yDFglSbsZ9Ww$y/mM7bG5uld7Wc9E1BNVD1bP+zfd2zXXiwx4yFuWhMI',
'argon2id:::',
'A{dNw<[l(dVCJ?0gD2M_E|c9\\~Zx+I',
0,
0,
0,
1,
'UNKNOWN'
)