These were reportedly stored as MD5 hashes without salting, making them extremely vulnerable to modern cracking techniques.
Most security services, including Have I Been Pwned and Mozilla Monitor , categorize this breach as "unverified" because the company never officially confirmed it. However, independent researchers such as Joseph Cox and sites like LeakedSource claimed to have verified samples of the data. Security Implications
The leak reportedly contains approximately 112 million to 127 million unique records .