Leak at Dailymotion

On 1 October 2016, Dailymotion — the Paris-based video-sharing platform — suffered a data breach that exposed roughly 85.2 million user accounts. The incident was disclosed in early December 2016 when breach-notification service LeakedSource obtained and reported the stolen dataset, around two months after the intrusion.

The stolen records contained 85.2 million unique email addresses and usernames. Of these, about 18 million accounts (roughly 20 percent) also had associated passwords, which were stored as bcrypt hashes using ten rounds of key stretching — a strong hashing scheme that made recovering the underlying plaintext passwords difficult.

Exposed data categories:

• Email addresses
• Usernames
• Bcrypt password hashes (for ~18 million accounts)

The breach was attributed to a network intrusion that allowed attackers to exfiltrate the account database. Because passwords were protected with bcrypt rather than stored in plaintext or with weak hashing, the immediate credential-cracking risk was limited, though the exposed email addresses and usernames still raised phishing and credential-reuse concerns. Affected users were advised to change their passwords as a precaution.