Your Password Hash Is a Lie: The Tally Breach Nobody’s Talking About
Tally’s breach notice says your password was ‘cryptographically hashed’ — but when asked which hash and whether it was salted, they went silent. The real failure isn’t the attack; it’s that an analytics dashboard had access to the authentication database at all. This is a design flaw, not just a breach.