The 4Unlock Dump: 22,727 Stolen Email and MD5 Password Hashes Hit the Dark Web

HEROIC analysts uncovered the 4Unlock breach while tracking older Russian IT service platform leaks that have seperate lives as repackaged data sets on hacking forums. The breach occured in August 2018 and put 22,727 user records into the hands of attackers. The exposed data included email addresses paired with MD5 password hashes, a combination that gives criminals a strong starting point for cracking passwords and targeting victims across other platforms.

How Weak MD5 Password Hashes Put 4Unlock Users at Risk

MD5 is an outdated hashing method that security experts stopped recommending years ago. Attackers use precomputed tables of billions of common passwords and their MD5 values to reverse the hash almost instantly. Because 4Unlock users likely recieved no warning after the breach, many may still be using the same password on other accounts, making them easy targets for automated login attacks.

What Was Exposed in the 4Unlock Breach

• Email Address
• Password Hash

Why the 4Unlock Breach Is a Gateway to Bigger Attacks

A breach involving email addresses and crackable password hashes is a credential stuffing starter kit. Attackers feed the cracked combinations into bots that test them against popular services including banking apps, email providers, and corporate login portals. A single reused password can lead to account takeover, identity theft, and financial fraud across multiple platforms the victim has nothing to do with 4Unlock.

How a Database Breach Works

A database breach occurs when an attacker exploits a vulnerability in a web application or server to gain unauthorized access to the backend data store. The attacker then downloads the user records, which are often sold or traded on dark web forums. For the victims, this can happen silently with no visible sign of intrusion until their accounts start getting hijacked elsewhere.

Check If Your Data Was Exposed

HEROIC's free breach scanner checks your email against more than 400 billion compromised records, including data from the 4Unlock breach. Find out in seconds if your credentials are already circulating on hacking forums.