Fotolog.com Data Breach: December 2018 Exposure of 33 Million Accounts

In December 2018, Fotolog.com, once a popular photo-sharing social network, suffered a massive data breach that exposed the personal information of over 33 million users. Fotolog had built a global community where users could share daily photos and blog posts, making it a hub for online creativity and cultural exchange. The breach, which came at a time when Fotolog was undergoing major changes as a platform, resulted in the exposure of sensitive account details including usernames, full birthdates, email addresses, and unsalted SHA-256 password hashes. The incident marked a turning point for the service, as it later shifted away from social networking and reemerged as a news website.

What Information Was Exposed?

The breach impacted a total of 33,514,503 records. The compromised fields included user-chosen usernames, complete birthdates, email addresses, and unsalted SHA-256 cryptographic hashes of passwords. While passwords were not exposed in plain text, the lack of additional protections (like salting) meant that determined attackers could potentially try to crack them, especially for users with weak or common passwords.

Timeline of the Fotolog Breach

The compromise took place in December 2018. At the time, Fotolog still maintained its user base as a social network, though it was shortly thereafter repurposed into a news platform. Details of the breach came to light when the dataset — including millions of sensitive records — was circulated in online communities, prompting widespread attention and questions from former users.

Scope and Impact

Fotolog’s breach affected more than 33 million users globally. The combination of birthdates, usernames, emails, and hash-protected passwords made this exposure particularly concerning for those who valued their privacy or reused login details on other sites. The incident ultimately preceded Fotolog’s pivot away from its original social media focus.

FAQ About the Fotolog.com Data Breach

What happened in the Fotolog breach?

In December 2018, Fotolog.com was breached, leading to the exposure of account details for over 33 million users. The leaked data included usernames, full birthdates, email addresses, and unsalted SHA-256 password hashes.

How many users were affected in the Fotolog data breach?

The breach affected 33,514,503 Fotolog user accounts worldwide.

What data was leaked in the Fotolog.com breach?

The exposed data included usernames, complete birthdates, email addresses, and hashed passwords.

When did the Fotolog data breach happen?

The breach occurred in December 2018.

How can i check if i'm in the Fotolog.com breach?

You can check if your information was part of the Fotolog.com breach by utilizing the DeHashed search engine.