The MacKeeper data breach

The short version of this: A security researcher claimed to have downloaded sensitive info from 13 million MacKeeper accounts.

I have recently downloaded over 13 million sensitive account details related to MacKeeper, Zeobit, and/or Kromtech […] stuff like names, email addresses, usernames, password hashes, computer name, ip address, software license and activation codes, type of hardware (ex: “macbook pro”), type of subscriptions, phone numbers and computer serial numbers.

The researcher, Chris Vickery, contacted the companies hosting the insecure data, and the companies eventually sealed up the security holes.

This story is receiving a lot of press, at least in part, because of the strong feelings people have about MacKeeper. From the MacKeeper Wikipedia page:

MacKeeper is a utility software suite for Mac OS X. It is heavily promoted and has been the subject of a class-action lawsuit for false advertising. Some reviewers say that MacKeeper secures and optimizes a system, while others say that crash-prone Macs can be cured by removing MacKeeper.

And:

In January 2014 a class action lawsuit was filed against Zeobit in Illinois. The lawsuit alleged that “neither the free trial nor the full registered versions of MacKeeper performed any credible diagnostic testing” and reported that a consumer’s Mac was in need of repair and was at-risk due to harmful error. In May 2014 a lawsuit was filed against Zeobit in Pennsylvania, alleging that MacKeeper fakes security problems to deceive victims into paying for unneeded fixes.

Karma.