10 Images

We noticed a recent resurgence of interest around a dataset originating from the now-defunct Italian creative platform, 10 Images. This particular exposure, dated August 26, 2018, has resurfaced on a prominent hacking forum, drawing attention due to its inclusion of user credentials. What struck us was the relatively small user count, 1,491 individuals, yet the persistent availability of this data suggests a successful credential stuffing campaign or a deliberate re-distribution for continued exploitation. The nature of the exposed data, specifically email addresses and password hashes, presents a clear and present risk to any associated accounts or services where users may have reused credentials.

The breach, initially reported in August 2018, involved a database compromise of the 10 Images platform. The leaked data comprises 1,491 records, each containing an email address and a password hash. The exact format of the password hash was not immediately ascertainable, but its inclusion alongside the email address is the primary vector for exploitation. This data is likely being utilized in credential stuffing attacks against other platforms, leveraging the common practice of password reuse. The source structure of the leak points to a direct database exfiltration, and the leak location remains within private hacking forums, indicating ongoing, albeit clandestine, distribution.

While this specific 10 Images breach did not garner widespread mainstream news coverage at the time of its initial discovery, its re-emergence on dark web forums is consistent with trends observed in OSINT research regarding the lifecycle of compromised credential data. Such datasets are often repackaged and resold, or used to fuel further attacks long after their initial exposure. The relatively low pwned count suggests it may not have been a high-profile target for mass exploitation, but rather a dataset that found its niche among attackers seeking specific user bases or for targeted credential stuffing operations.