Hemmakväll Data Breach

Dagens Nyheter reported on July 8, 2015 that a register covering nearly 50,000 people was circulating with encrypted passwords and personal details. A public breach source catalogues 47,297 unique emails on the same date, with names, phone numbers, physical addresses, and passwords stored using weak MD5.

The 47,297 value is a public breach source's unique-email measure, not a count of people, customers, or raw rows. The local import selected only email-form values from the first column of a comma-delimited source. The live index contains 47,348 email associations; names, phones, addresses, and passwords are not locally searchable. The local total is 51 above a public breach source's measure, and the dataset versions remain unreconciled.

A private result can establish only that the controlled email occurs in this email subset attributed to Hemmakväll. It cannot establish customer or account ownership, rental or purchase history, a name, phone, home address, password, field co-occurrence, password reuse, compromise, or misuse. A negative result also covers only the current 47,348-email version.

MD5 is not plaintext, but it provides weak resistance to offline guessing. Only someone who independently knows the old Hemmakväll password and still reuses it elsewhere should replace it and enable MFA where available. Messages citing old customer or contact details should be verified through independent channels.