← 000webhost

2015 000webhost — 13-15M accounts (free hosting)

2015 15.0M records affected Share on X

Data compromised

Usernames, passwords (plaintext), email addresses, IP addresses, names

Technical writeup

Hacker exploited old PHP vulnerability to upload malicious files. Passwords stored in plaintext. Data sold on criminal forums for $2,000.

Root cause

PHP vulnerability - unpatched

References