> For the complete documentation index, see [llms.txt](https://pnpt.adot8.com/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://pnpt.adot8.com/external-pentest-playbook/common-pentest-findings/historical-account-compromises.md).

# Historical Account Compromises

## Overview

Company accounts found in breached databases fall under this category. Passwords are commonly reused or changed a just a little bit which can give an Attacker an easy foothold into the organization.

The **Likelihood** of this is **High** along with the **Impact** being **High** as well, for obvious reasons.

The company can create a blocklist of the compromised passwords.

## Example

<figure><img src="https://152155081-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FUczSr73L34emqNMDOxDg%2Fuploads%2F8e2ufgxX0xSJrF8IXmN3%2Fimage.png?alt=media&amp;token=ee3226b9-82de-41e1-b3fe-c1b1a10dad96" alt=""><figcaption><p>Finding</p></figcaption></figure>

<figure><img src="https://152155081-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FUczSr73L34emqNMDOxDg%2Fuploads%2F3BbOn3ShmYPBT7tbVVUA%2Fimage.png?alt=media&amp;token=58ab7630-6e38-4b18-ab1f-3160acd036f1" alt=""><figcaption><p>Passwords should always be obfuscated in pictures. Usernames can be shown in credential dumps</p></figcaption></figure>

<figure><img src="https://152155081-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FUczSr73L34emqNMDOxDg%2Fuploads%2FxTSkR6WbDChjDvgJzpmG%2Fimage.png?alt=media&amp;token=dc43ae6d-21b9-4c5b-9f93-a07c797b37f8" alt=""><figcaption><p>Remediation</p></figcaption></figure>
