Our Analysts Found 13,856 My Eyes Choice Passwords Leaked Online

My Eyes Choice Data Breach: 13,856 Accounts Exposed

HEROIC analysts found a dataset circulating on a hacking forum tied to a breach dated August 26, 2018. The affected site, My Eyes Choice, was a U.S.-based optical retailer that has since shut down. The dataset contains 13,856 records, each pairing an email address with a password hash stored in an unspecified format.

Why This Is Dangerous

Because the hashing format used by My Eyes Choice was never disclosed, it is impossible to know from the outside how strong the protection actually was. Many older, defunct sites used weak or outdated hashing that modern cracking tools can defeat quickly. If that turns out to be the case here, attackers could recover the original passwords behind these 13,856 email addresses.

What Was Exposed

• Email addresses
• Password hashes (format unspecified)

Why This Matters

Even a hashed password becomes dangerous once it is cracked, since it then functions exactly like a stolen plaintext credential in a credential stuffing attack. My Eyes Choice may no longer exist, but the people who once had accounts there are still at risk if they reused that same password on an active email, banking, or shopping account today.

How Database and Combolist Breaches Work

This breach originated as a database compromise, where an attacker accessed My Eyes Choice's backend systems and extracted user records directly, hashed passwords included. From there, the data became part of a combolist, the compiled email-and-password files that criminals build from multiple breaches and use to run automated login attempts against unrelated websites and services.

Check If You Are Affected

If you ever had an account with My Eyes Choice or a similar retailer, HEROIC's free breach scanner checks your email address against a database of more than 400 billion leaked records. Run a scan to see if your information was exposed, and update any password you may still be reusing elsewhere.