SHA-1 has been known to be potentially insecure since 2005, but this wasn't proven in practice, at least not publicly, until Google recently announced they executed a successful collision attack, breaking it. The collision attack is notable as it takes about one 100,000th of the time to crack...
Secure Hash Algorithm 1 has finally been cracked. That said, it is not exactly something easy to do and requires some expensive resources, but we can be sure that someone nasty has those resources available. You can read up on this at the Google Security Blog.
Today, more than 20 years after...