Freepik Co. says 8.3 million email addresses and 3.7 million hashed passwords were leaked. The company says it updated the hash of all users to bcrypt instead of MD5 or SHA-1. Experts urge organizations to instead use a dedicated hashing algorithm such as bcrypt (bcrypt) The company is working with an outside security firm to conduct a full review of its external and internal security practices. The breach is tied to an attack on the company’s graphic resources app and Flaticon icon platform.”]
Source: https://www.cuinfosecurity.com/massive-freepik-data-breach-tied-to-sql-injection-attack-a-14880