Cybercrooks trawl Fishbrain to net password hashes

Fishbrain disclosed an August 19 breach in which attackers stole user personal data and password hashes with salts; while passwords were not stored in plaintext, the compromised hashes may be crackable. Fishbrain reset all passwords, patched the vulnerability, restricted access, and advised users to change reused passwords and watch for phishing using the stolen data.