Security breach email

[Stealth]

As it came from an address I didn't recognise (FR24.com) I've sent them a query to verify it is genuine. I also didn't like the look of the link it asked me to click on to reset password (which I haven't as yet).

[mcduck]

Hi!

I have got this email:

Dear Flightradar24 user,

I regret to inform you that late last week we identified a security breach that may have compromised the email addresses and hashed passwords (see explanation below) for a small subset of Flightradar24 users (those who registered prior to March 16, 2016), including you.

Is it yours?


Thx,
federbear.

Lot's of us got the same mail. I think FR24 should give us some more info. Like what hashing method they used on passwords (salted?). Also, why is a 2 year outdated user database online?

[federbear]

Hi!

I have got this email:

Dear Flightradar24 user,

I regret to inform you that late last week we identified a security breach that may have compromised the email addresses and hashed passwords (see explanation below) for a small subset of Flightradar24 users (those who registered prior to March 16, 2016), including you.

Is it yours?


Thx,
federbear.