Netlog Data Breach Exposes 49 Million Email Addresses and Plain‑Text Passwords
What Happened — In July 2018 Netlog disclosed that a breach dating back to November 2012 exposed the email addresses and clear‑text passwords of 49,038,354 former users. The service had been shut down in 2015, but the compromised credentials remain searchable.
Why It Matters for Trust & Control Assurance
- Storing passwords in clear text violates basic credential‑management controls that a continuous assurance program must monitor and evidence.
- Exposure of millions of credentials creates a downstream risk of credential‑stuffing attacks against any organization where users reused passwords.
- Demonstrating that password‑hashing, MFA, and credential‑monitoring controls are in place provides defensible audit evidence and reduces the likelihood of similar incidents.
Who Is Affected – Social‑media platforms, SaaS providers, and any organization that allowed password reuse across services.
Recommended Actions –
- Verify that all stored passwords are hashed with a strong, salted algorithm (e.g., Argon2, bcrypt).
- Enforce multi‑factor authentication for all user accounts and encourage password rotation.
- Deploy continuous credential‑exposure monitoring to detect compromised credentials in real time.
Technical Notes – The breach involved the theft of a user database containing email addresses and plain‑text passwords. No specific vulnerability (CVE) was disclosed; the root cause appears to be inadequate credential storage practices. Source: Have I Been Pwned – Netlog breach