It's now MySpace's turn to deal with a massive data breach

May 27, 2016 19:20 GMT  ·  By

LeakedSource, a company that maintains a searchable database of credentials leaked in data breaches, has revealed today that it added over 427 million user records to its immense database, after earlier this week it also included 167 million LinkedIn accounts.

MySpace has not released any statement on this incident yet. If confirmed, the MySpace data breach will be one of the biggest data breaches to date.

LeakedSource cracked most passwords

In total, data for around 360,213,024 users was included, containing details such as usernames, email addresses, and passwords.

Just like in LinkedIn's case, the data was not uniform. LeakedSource analysts say they found 427,484,128 user passwords, but not all were attached to accounts, some accounts had a secondary password, some had a secondary password and no primary password, and some database entries contained just the password.

The company says passwords were encrypted with SHA1, but they were not salted. Because of this, LeakedSource analysts were able to crack most of them.

Users can request LeakedSource to remove their data

The company says it received the data from an anonymous user via Jabber. There is also a listing on the Dark Web that claims to sell the MySpace database.

LeakedSource explains that users who are uncomfortable with the idea of having their data listed in its database can request its removal by sending its staff an email. Nevertheless, since the data is also up for sale, the people interested in getting their hands on the data can easily obtain it if they ever want to get a hold of your MySpace password. The best solution at this time would be to use unique, strong passwords for all your online accounts.

Below are tables with the top MySpace passwords and the top email domains. Just take note that the first entry, "homelesspa," was automatically generated for a number of accounts that had the same email format, possibly bots or fake users.  

Top 20 MySpace Passwords
Rank Password Frequency
1 homelesspa 855,478
2 password1 585,503
3 abc123 569,825
4 123456 487,945
5 myspace1 276,915
6 123456a 244,641
7 123456789 191,016
8 a123456 165,132
9 123abc 159,700
10 (POSSIBLY INVALID) 158,462
11 qwerty1 141,110
12 passer2009 130,740
13 fuckyou1 125,302
14 iloveyou1 123,668
15 princess1 114,107
16 12345a 111,818
17 monkey1 106,424
18 football1 101,149
19 babygirl1 90,685
20 love123 88,756

Top 20 MySpace User Email Domains
Rank Email Domain Frequency
1 @yahoo.com 126,053,325
2 @hotmail.com 79,747,231
3 @gmail.com 25,190,557
4 @aol.com 24,115,704
5 @aim.com 5,345,585
6 @live.com 4,728,497
7 @hotmail.co.uk 4,701,850
8 @msn.com 4,378,167
9 @myspace.com 4,257,451
10 @comcast.net 3,275,651
11 @ymail.com 2,866,796
12 @sbcglobal.net 2,793,292
13 @hotmail.fr 2,335,422
14 @web.de 1,486,602
15 @rocketmail.com 1,420,819
16 @yahoo.co.uk 1,384,943
17 @verizon.net 1,255,478
18 @cox.net 1,082,304
19 @mail.ru 1,040,442
20 @hotmail.it 1,018,406
MySpace data available on the Dark Web
MySpace data available on the Dark Web

Photo Gallery (2 Images)

MySpace suffers huge data breach
MySpace data available on the Dark Web
Open gallery