6,845 Passwords Exposed in Signalling Notices Data Breach

In August 2018, HEROIC analysts found 6,845 records tied to Signalling Notices, a UK community archive site for railway signalling enthusiasts, posted on a hacking forum. The exposed data includes email addresses and MD5 password hashes belonging to members of the niche community.

Why the Signalling Notices Password Exposure Is Dangerous

MD5 hashing is outdated and can be cracked quickly with modern tools like rainbow tables. Once an attacker recovers the plaintext password, they have a working email and password combination they can try on other websites the same person may have used.

What Was Exposed in the Signalling Notices Leak

• Email addresses
• MD5 password hashes

Why This Matters for Signalling Notices Members

Members of niche community sites often reuse the same password across email, banking, and social media accounts. If cracked, this dataset gives attackers a direct path to credential stuffing, account takeover, and identity theft against anyone who reused their Signalling Notices password elsewhere.

How Database Breaches Turn Into Combolists

A database breach happens when an attacker exploits a weakness in a website's backend, such as an unpatched flaw or exposed admin access, to copy the entire user table. That stolen data is then shared or sold on hacking forums, where it is frequently merged with other breaches into combolists, giant files criminals use to automate login attempts against major online services.

Check If You Are Affected

HEROIC's free breach scanner checks your email address against more than 400 billion leaked records, including the Signalling Notices data. If you find a match, change that password immediately and turn on multi-factor authentication wherever it's offered.