/
← Voltar ao feed
medium nonprofit media

OTW Fanlore wiki breach exposes 145k email addresses with MD5 and PBKDF2 password hashes

1 fonte(s) · 1 atualização(ões) · publicado 18/08/2026 23:09 · coletado há 4 dias

In August 2026, the Organization for Transformative Works (OTW) identified unauthorised access to the Fanlore wiki it operates. The breach exposed roughly 145k unique email addresses along with usernames and passwords stored as MD5 or PBKDF2 hashes. OTW self-submitted the data to Have I Been Pwned, which added it on 19 Aug 2026 (144.5k affected addresses). The article does not name an attacker or describe how access was gained.

Detalhes técnicos

  • Exposed data: email addresses, usernames and password hashes (MD5 or PBKDF2).
  • MD5 is a fast, weak hashing scheme, so those passwords are far easier to crack than the PBKDF2 ones.
  • Initial access method and threat actor are not stated in the article.
  • Breach occurred in August 2026; added to HIBP on 19 Aug 2026.

Remediação

  • Change the Fanlore password immediately, and on every other account where it was reused.
  • Enable 2FA wherever supported.
  • Use a password manager to generate and store strong, unique passwords.
  • Check exposure through Have I Been Pwned.

Linha do tempo

  1. haveibeenpwned.com ↗ · pub. 18/08/2026 23:09 · coletado 19/10 17:56 primeiro registro

    OTW Fanlore wiki breach exposes 145k email addresses with MD5 and PBKDF2 password hashes

    ler a análise desta fonte

    In August 2026, the Organization for Transformative Works (OTW) identified unauthorised access to the Fanlore wiki it operates. The breach exposed roughly 145k unique email addresses along with usernames and passwords stored as MD5 or PBKDF2 hashes. OTW self-submitted the data to Have I Been Pwned, which added it on 19 Aug 2026 (144.5k affected addresses). The article does not name an attacker or describe how access was gained.

    Technical Details

    • Exposed data: email addresses, usernames and password hashes (MD5 or PBKDF2).
    • MD5 is a fast, weak hashing scheme, so those passwords are far easier to crack than the PBKDF2 ones.
    • Initial access method and threat actor are not stated in the article.
    • Breach occurred in August 2026; added to HIBP on 19 Aug 2026.

    Remediation

    • Change the Fanlore password immediately, and on every other account where it was reused.
    • Enable 2FA wherever supported.
    • Use a password manager to generate and store strong, unique passwords.
    • Check exposure through Have I Been Pwned.