We found a DMF password in a public dump. Also... JOHN DOE IS A REAL PERSON???

Okay, I was digging through some publicly circulating credential dumps looking for anything connected to De Monne Financial's app.

And guess what? Found a DMF account with a password sitting right there in one of the dumps.

But that's not even the best part.

THE ACCOUNT BELONGS TO SOMEONE NAMED JOHN DOE.

Like, an ACTUAL person named John Doe. I'm dying. 💀

I thought that name was reserved for unidentified bodies, fake accounts, and people in cybersecurity training videos.

Apparently, somewhere out there, some poor bastard is walking around with the most generic name in human history AND has his credentials floating around online.

Anyway, the dump lists a DMF employee and a plaintext password. No idea whether it's still valid, but it's worth investigating in relation to the app.

YOOOOO 💀💀💀
AINT NO WAY THERES AN ACTUAL JOHN DOE LMAOOOO
bro probably gets asked if thats his real name every time he orders starbucks 😭
also how tf does a financial company end up in a public password dump???

nahhhh this is actually sending me 😭
imagine being named john doe and then getting your entire financial life leaked. like bestie you're literally the default victim 💀
also before y'all start celebrating, a password in some crusty dump doesn't automatically mean it works on the app.
but ngl, DMF has some questionable decisions going on behind the scenes. just saying 💅

Already shared on DoomScroll lol

BRUHHHH 😂😂😂
JOHN DOE?!?!?!
I BEEN THINKIN THAT WAS A MADE UP NAME MY WHOLE LIFE
homie probably walk into the bank and they think he testing they security or somethin 😭
lilith u gotta keep us updated on this one!!

Okay, but seriously... 😂
What if John Doe is just a test account someone forgot to delete? 🤔📊
Imagine being the analyst who has to explain that to management. 😭
"So, we have good news and bad news. The good news is John Doe exists. The bad news is John Doe has been compromised." 💀

YOU PEOPLE ARE MISSING THE OBVIOUS QUESTION.
WHY WOULD A REAL PERSON BE NAMED JOHN DOE?
THAT NAME HAS BEEN USED IN GOVERNMENT RECORDS AND LEGAL PROCEEDINGS FOR DECADES.
NOW WE'RE SUPPOSED TO BELIEVE SOME RANDOM GUY WITH THAT EXACT NAME HAS A FINANCIAL ACCOUNT?
I'M NOT BUYING IT.
SOMEBODY NEEDS TO LOOK INTO WHO BUILT THAT APPLICATION.

@b1tfr34k babe it's called having parents who hate you 😭
not everything is a government conspiracy.
anyway i'll see what i can find out about the app's account records.
and lilith PLEASE tell me you didn't just post somebody's entire password on ghosttown 💀