Back to Radar
FO

Fotolog

High

Fotolog suffered a breach in Dec 2018, exposing 16.7M user records.

Records exposed
16,717,854 records
Breach date
Breach Dec 1, 2018
Last update
Updated Jun 15, 2021

What data was exposed?

Fields reported as compromised in this breach record.

Email addressesPasswordsUsernames

Why does this breach matter?

In-depth analysis of the breach and its implications.

In December 2018, Fotolog, a photo-sharing platform, experienced a data breach resulting in the exposure of 16.7 million records. Compromised information included email addresses, usernames, and passwords hashed with the SHA-256 algorithm without salting, increasing vulnerability to decryption. The platform ceased operations in 2019 and was rebranded as a news website based in Bosnia and Herzegovina.

Impact Analysis

Understanding the scope and consequences of this breach.

User Impact
Users had potentially exploitable credentials disclosed, calling for increased vigilance.
Business Impact
Post-breach, the platform was shut down, impacting its operational viability.
Affected Sectors
  • Social Media
  • Information Technology
Geographic Impact
  • Global

What You Should Do

Recommended actions to take in response to this breach.

If You Were Affected

  • Change your password associated with your Fotolog account.
  • Update passwords on other accounts using the same credentials.
  • Enable two-factor authentication wherever possible.

Preventive Measures

  • Use unique, strong passwords for each account.
  • Opt for services with salted password hashing for stronger protection.
  • Regularly review account access logs for unfamiliar activities.

Frequently Asked Questions

Common questions about this breach and what it means for you.

Email addresses, usernames, and unsalted SHA-256 hashed passwords were disclosed.