FilmAI.in Breach Exposes 645,786 Email Addresses, Usernames, and Plain‑Text Passwords
What Happened — In 2019‑2020 the Lithuanian streaming platform FilmAI.in suffered a data breach that released 645,786 records containing email addresses, usernames, and passwords stored in clear text.
Why It Matters for Trust & Control Assurance
- The incident illustrates a failure to protect credential data—a core control objective for identity and access management.
- Continuous control‑assurance programs require documented evidence that passwords are hashed, access is restricted, and credential handling policies are enforced.
- Verisq’s Access Controls capability helps organizations capture, monitor, and demonstrate compliance with this control across frameworks.
Who Is Affected – Media and entertainment companies that operate streaming services, as well as any users whose credentials were stored on the platform.
Recommended Actions – Review password storage practices, enforce strong hashing, implement multi‑factor authentication, and collect audit evidence of credential protection for your framework of record. Source: [HIBP breach record]
Technical Notes – The breach exposed clear‑text passwords, indicating passwords were not hashed or salted. No specific vulnerability (CVE) was disclosed; the exposure appears to stem from inadequate data‑at‑rest protection. Source: [HIBP breach record]