MoDaCo Data Breach (2016): What Was Exposed & What To Do

In January 2016, the UK-based Android community site MoDaCo reported a data breach that exposed records for approximately 880,000 subscribers. The compromised information included email addresses, IP addresses, usernames, and passwords stored as salted MD5 hashes. The incident was made public on or around 1 January 2016, though the precise date of the intrusion itself remains undisclosed in available reporting.

Inside the incident

Public records indicate that the breach affected subscriber identities on the MoDaCo platform. The data set comprised email addresses, IP addresses, usernames, and passwords hashed with a salted MD5 algorithm. No further technical details, such as the method of access or the duration of exposure, have been released in connection with the 2016 report. The organisation confirmed the scale at roughly 880,000 affected accounts.

How a breach like this happens

Incidents involving online community platforms often begin with attackers identifying publicly reachable login systems or outdated software components. Once initial access is obtained, credentials stored in databases become a primary target. Even when passwords are hashed, weaker or older hashing methods can be subjected to offline attacks if the full data set is copied. The presence of IP addresses alongside account details is common in server logs that are retained alongside user records.

About MoDaCo

MoDaCo operated as a United Kingdom-based online forum and resource hub for Android device users and developers. Sites of this type typically maintain user accounts to support discussion threads, device-specific guides, and file downloads. The data held by such communities usually centres on account credentials and basic connection information rather than financial or health records.

What data was at risk

The breach listing names four categories of information: email addresses, IP addresses, usernames, and passwords stored as salted MD5 hashes. No additional data types have been confirmed. Organisations in this sector commonly retain usernames and contact details for account management, yet the exact scope of any other fields remains unconfirmed beyond the four items reported.

What's at stake

Individuals whose email addresses and usernames appeared in the data set face an elevated chance of targeted phishing or account takeover attempts on other services where the same credentials may have been reused. Hashed passwords, even when salted, can be tested against common word lists over time. For the organisation, the exposure of subscriber records can reduce trust among its user base and prompt reviews of password storage practices.

Were you affected?

Anyone who created an account on MoDaCo prior to 2016 can check whether their email address appears in public breach data sets by using a free exposure scanning service. Changing passwords on any other sites that share the same credentials, and enabling multi-factor authentication where available, are immediate steps that limit further misuse of exposed information.

AICompiled with AI assistance from public sources and published under our editorial standards.