Your Credentials May Already Be Cracked. The 5 Stars Apps Breach Exposed 74 Hashed Passwords.

Your login credentials may already be in the hands of attackers. The 5 Stars Apps breach, dated August 19, 2024, exposed 74 user records from an Arabic-language mobile app review and rating platform based in Saudi Arabia. The compromised data included email addresses, usernames, and password hashes stored using a mixture of algorithms: bcrypt, MD5, and other formats. The presence of MD5-hashed passwords in particular is a serious concern, as MD5 is a weak and long-deprecated hashing method that can be reversed in hours using widely available cracking tools.

Although the record count is small, the risk to affected individuals is disproportionate. Compromised credentials from any platform, no matter how niche, are tested against email services, banking platforms, and social media accounts through automated credential stuffing. Users who reused their 5 Stars Apps password anywhere else face immediate account takeover risk across every service where that password was used.

What Was Exposed

• Email Address
• Password Hash (bcrypt, MD5, and other formats)
• Username

Why This Matters

Password hashes are only as safe as the algorithm used to create them. MD5 hashes can be cracked within hours or even minutes using modern GPU-based tools and precomputed rainbow tables. Once an attacker recovers a plaintext password from an MD5 hash, they immediately test that email and password combination against dozens of other services in automated credential stuffing campaigns. This means a breach from a small app review site can cascade into unauthorized access to email accounts, financial platforms, and any other service where the victim reused the same password.

Usernames add an additional vector: many users use the same username across multiple platforms, allowing attackers to correlate accounts and target the victim across services even if the password cracking effort fails initially.

How Database Breaches Work

A database breach occurs when an attacker gains access to a back-end data store through methods such as SQL injection, exploitation of unpatched server software, or compromised credentials. Once inside, the attacker exports user tables containing stored account information, including hashed passwords. The data is then packaged and distributed or sold on dark web forums. Platforms that use outdated hashing algorithms like MD5 significantly amplify the risk because the time required to crack hashes is dramatically shorter than with modern algorithms like bcrypt. Even bcrypt-hashed passwords face cracking risk if the underlying password is short or commonly used.

Check If You Are Affected

If you held an account on 5 Stars Apps or used the same email and password combination on any other service, your credentials may be at risk. HEROIC's free breach scanner searches a database of over 400 billion compromised records to tell you whether your information has been exposed. Visit heroic.com to run a free check and take immediate steps to secure your accounts.