Plain‑text Password Leak Exposes 117,000 SkTorrent User Accounts
What Happened — In February 2016 the Slovak torrent‑tracking site SkTorrent was hacked. A data dump of 117,070 user records—including usernames, email addresses and passwords stored in plain text—was posted publicly.
Why It Matters for Trust & Control Assurance
- The breach illustrates a classic failure of credential‑protection controls: passwords were not hashed or salted, leaving them trivially reusable.
- Continuous control‑assurance programs require evidence that credential storage meets a “secure password handling” objective, which this incident proves was missing.
- Demonstrating robust password‑storage and MFA controls provides a defensible audit trail and reduces the risk of credential‑stuffing attacks on downstream services.
Who Is Affected
- Online media / streaming platforms that store user credentials.
- General internet users whose passwords were reused on other services.
Recommended Actions
- Force password resets for any accounts that may have reused the exposed credentials.
- Implement salted, computationally‑hard hashing (e.g., bcrypt, Argon2) for all stored passwords and enable multi‑factor authentication.
- Conduct a control‑audit of credential‑storage practices against your framework of record and capture evidence for continuous monitoring.
Technical Notes
- Attack vector: unknown (the site was simply compromised).
- Data types exposed: usernames, email addresses, clear‑text passwords.
- No CVE associated; the issue is a procedural security failure rather than a software flaw.