Leak at Hello Kitty fan site poem

Sanrio, the owner of Hello Kitty, says it has patched the security hole that led to a server hack. The database with more than 3.3 million users of sanriotown.com, the official fan site of Hello Kitty, among others, was put online by hackers.

Sanrio Digital says the issue is being investigated internally and the leak has been patched. Several new security measures are also said to have been put on the servers. Sanrio said no other information was stolen or disclosed. No credit card or other payment information was allegedly stolen. Passwords of payment information would be stored securely, the company reports to NBC.

According to previous reports, the stolen database contains, among other things, names, dates of birth, gender, country of origin and e-mail addresses. Since it is about Hello Kitty lovers, there will be many accounts of children in between. The sha-1 password hashes are also on the street and were not salted, along with any hints and their answers.

Not only the site behind sanriotown.com uses the database. Other sites of the Japanese company behind Hello Kitty and other figures also use the same database. It is not known how long the information has been online. The oldest date that can be traced is November 22, 2015.