Tell HN: Tally Data Breach

Tally.so notified users of a data breach after an attacker gained unauthorized access to their analytics service, Metabase, on August 3. The breach exposed user email addresses and password hashes, but not the passwords themselves, as the hashes are one-way and cannot be reversed. The attacker did not access user forms or submitted answers, which are stored separately. A user inquired about the type of hash used and whether passwords were salted, but has not received a response yet. The breach was limited to the analytics service and did not compromise all of Tally's data.