Security Market Segment LS
Saturday, 14 July 2012 23:35

Billabong website hacked; reveals passwords of 21,000 users


In order to make life easy for all concerned, Billabong chose to store details for their web site subscribers in plain text. How very thoughtful.

iTWire recently wrote in somewhat glowing terms of the steps Nvidia took to ensure the web access accounts of its customers were well protected.

We can give no such praise to whoever built Billabong's website.

According to a dump from their password database, Billabong stored all passwords in plain text - presumably this made it easier to tell a user what their password was if they'd forgotten it. It also made life very easy for any hackers who wished to masquerade as the users on the site.

It also made the process (for any user who made this mistake) of trying the Billabong password against the email account. What could be easier than to write a simple script that lifted the email address and password out of the dump file and attempted to log in with them at the various webmail services.

Until SC Magazine brought the breach to Billabong's attention, the company was entirely unaware of the problem.

It appears that all accounts have been disabled, but the total lack of ANY advice from the company on their website is very concerning - the average user will not know that their password (possibly used elsewhere) is visible in plain text.

The company has been contacted for comment.


As part of our Lead Machine Methodology we will help you get more leads, more customers and more business. Let us help you develop your digital marketing campaign

Digital Marketing is ideal in these tough times and it can replace face to face marketing with person to person marketing via the phone conference calls and webinars

Significant opportunity pipelines can be developed and continually topped up with the help of Digital Marketing so that deals can be made and deals can be closed

- Newsletter adverts in dynamic GIF slideshow formats

- News site adverts from small to large sizes also as dynamic GIF slideshow formats

- Guest Editorial - get your message out there and put your CEO in the spotlight

- Promotional News and Content - displayed on the homepage and all pages

- Leverage our proven event promotion methodology - The Lead Machine gets you leads

Contact Andrew our digital campaign designer on 0412 390 000 or via email



Security requirements such as confidentiality, integrity and authentication have become mandatory in most industries.

Data encryption methods previously used only by military and intelligence services have become common practice in all data transfer networks across all platforms, in all industries where information is sensitive and vital (financial and government institutions, critical infrastructure, data centres, and service providers).

Get the full details on Layer-1 encryption solutions straight from PacketLight’s optical networks experts.

This white paper titled, “When 1% of the Light Equals 100% of the Information” is a must read for anyone within the fiber optics, cybersecurity or related industry sectors.

To access click Download here.


David Heath

David Heath has had a long and varied career in the IT industry having worked as a Pre-sales Network Engineer (remember Novell NetWare?), General Manager of IT&T for the TV Shopping Network, as a Technical manager in the Biometrics industry, and as a Technical Trainer and Instructional Designer in the industrial control sector. In all aspects, security has been a driving focus. Throughout his career, David has sought to inform and educate people and has done that through his writings and in more formal educational environments.



Recent Comments