BleepingComputer writes: The text "HIBP" refers to the Have I Been Pwned data breach notification service created by Troy Hunt, with whom threat actors commonly share stolen data to be added to the service.
Hunt told BleepingComputer that the threat actor shared the Internet Archive's authentication database three days ago and it is a 6.4GB SQL file named "ia_users.sql." The database contains authentication information for registered members, including their email addresses, screen names, password change timestamps, Bcrypt-hashed passwords, and other internal data.
Hunt says there are 31 million unique email addresses in the database, with many subscribed to the HIBP data breach notification service. The data will soon be added to HIBP, allowing users to enter their email and confirm if their data was exposed in this breach.
@briankrebs Got caught up in this, but thankfully I used an alias email and a unique password so I'm just vaguely annoyed that someone is attacking them.
Preventative measures work
Yay they hacked a site running on donations. If they had any balls they'd breach X and delete it. Elon's password is probably GOD.
@briankrebs Ouch.
I'm curious, tho; I'm obviously aware of archive.org, but why would you visit it daily?
@briankrebs Fair enough.
In addition, I've just reread your profile; your profession makes that make a lot more sense. 🙂
@briankrebs thanks. That obviously not good, but as far as breaches go it seems not too severe
By comparison I've had my SSN leaked quite literally 5+ times already