Fishbrain AB

Fishbrain doesn't say what let attackers into its user database on August 19, only that a vulnerability existed and was later patched; the entry point stays unnamed. The haul was names, birth dates, emails, phone numbers, usernames, country data, and password hashes with salts, for a count the company won't state. Hashed isn't the same as safe: Fishbrain admits some of those hashes may be crackable. Patching the hole after 20 million anglers' credentials were already in reach isn't security, it was bait for the bad guys.