Andre Yoskowitz
1 Apr 2014 21:34
Boxee.tv, the Web-based TV service owned by Samsung, has seen its forums hacked and personal data stolen on 158,000 users.
Among the data stolen was names, emails, birth dates, IP addresses, message history and encrypted passwords.
An 800MB file was circulated online last week, and password management service LastPass began warning its customers on Tuesday about the breach. "Please update the password for your boxee.tv account immediately," says the LastPass warning. "The LastPass Security Challenge, located in the Tools menu of the LastPass addon, will help find any other accounts using the same password as the leaked account."
Despite the passwords being cryptographically hashed, they can be eventually cracked.
If you are a Boxee TV user, change your password immediately, and if you can't remember whether you had an account, HaveIBeenPwned? is a great resource to check.
Sources & Additional Material:
Original Report: Arstechnica Security & Hactivism
Check if you have been compromised: HaveIBeenPwned?