000webhost hacked, 13 million passwords stolen...

[Korora]

I actually have access to this (not going to mention where from...) but I must say, they must be complete idiots for not using any form of encryption. Even a basic MD5 would've helped but nope, plain-text was the way to go for them.

My best advice for everyone that may have been associated with 00webhost is to change your password to everything immediately (if you use the same password anywhere else, although you shouldn't...).

Also it's a great time to learn what password managers are and how to use secure passwords, mine are personally around 125 characters long.

Why do you have access?

Because I have access to everything. (very broad statement...)

But truthfully it's because I linger everywhere around the internet and find resources here and there, plus I also got friends that like to share resources they have.

 

[Its_The_Anarchist]

I have access to this db if anyone wants it

 

[Ravenfreak]

Ugh... I unfortunately had a website hosting on this hosting that was long forgotten... Hopefully they didn't hack into any of my forum accounts, I've since changed my password on here as well as on Facebook. Thankfully I use a completely different password for my Bank Account at least... The hosting company was a joke to begin with anyways. I couldn't properly seem to set up the email correctly on my forum, and therefore I could never even log into my forum that was filled with spam bots due to their poor hosting. I really feel sorry for those who have suffered from this hack.

 

[MasterA]

That is ridiculous. I can't believe this happened.

 

[erich]

I have to say, you get what you pay for. The fact that they used unencrypted passwords is just beyond my comprehension.

 

[Ashley]

I believe that this 'hack' was possible because 000webhost uses (used*) outdated PHP servers, which irritated me so much because I couldn't run my website on the old PHP versions. From what I heard, there was a flaw in the PHP version that allowed the 'hacker' to get in. I'll never use them again, probably.

--edit
I would also like to add that their 'auto installer' has been under maintenance for more than 8 months.

In all honesty, I can't say I'm not surprised to hear this, because I am, frankly, really not surprised at all. These guys always have been a joke and as someone else has rightly said, it's more or less the host's own fault that they got hacked at all, not so much the members in this case.