Launched in the late 90s, iMesh became the third-largest service in the United States in 2009, but the service was unexpectedly closed down last month.
LeakedSource, a search engine site that indexes leaked login credentials from data breaches, noted in a
blog post that the company has obtained the database containing more than 51 Million accounts from iMesh.
The same database has also been made available for sale on The Real Deal Dark Web marketplace by the same hacker that also put up for sale data from
LinkedIn,
Tumblr,
MySpace and
Twitter.
The LeakedSource's analysis shows the database contains user information, including email addresses, usernames, passwords, IP addresses, location information and other information on users.
Though iMesh stored all passwords in hashed and salted format, the passwords were salted with the MD5 algorithm that is easy to break nowadays.
Based on the most recent records in the leaked database, the data breach search engine estimates the hacker breached iMesh on September 22, 2013.
The database contains 13.7 Million users from the US, around 4 Million from Turkey, over 3.5 Million from the UK, and remaining from other parts of the world. Most iMesh’s users signed up with Hotmail (14.3 Million) and Yahoo (10.5 million) emails, and almost 1 Million users used 123456 as their password.
All the data is now up for sale on the dark web for just 0.5 Bitcoin (nearly US$335), so it's high time you changed your passwords for all social media sites immediately, especially if you use the same password for different websites.
