Taringa Latin American Social Network Breach (2017): 28 Million User Accounts Including Weak MD5 Passwords Exposed

About Taringa

Taringa, often called "the Latin American Reddit," was a large social-networking and content-sharing community especially popular in Argentina and across Spanish-speaking Latin America.

Why They Hold Your Data

Social networks and discussion platforms collect user accounts, profile data, posts, messages, and long-term community activity tied to user-generated content and social participation.

Recent Developments

After the breach, Taringa reset all user passwords and upgraded its password hashing from MD5 to SHA-256.

Data Points Exposed

Breach Impact

With nearly all MD5 hashes cracked, the breach effectively exposed plaintext-equivalent credentials for tens of millions of users, driving broad credential-stuffing risk across Spanish-language and global services.

Exploitation & Downstream Threats

• Credential stuffing against reused passwords across other platforms | • Targeted phishing campaigns using exposed email addresses

What You Should Do

1. Reset any reused passwords and enable MFA on email first, then financial accounts.
2. Do not use unofficial 'am I affected' lookups; several are themselves harvesting operations.

How ObscureIQ Can Help

1. Corpus confirmation: determine whether and where the principal (plus household and staff) appear in this dataset and which specific fields are exposed for them.
2. Exposure mapping: cross-reference the exposed identifiers against broker-available data to size and prioritize the principal's wider footprint.
3. ThreatWatch tuned to this incident's identifiers and misuse pattern (impersonation and targeting patterns, not generic credential monitoring).