Check yourself: Did the 71Three breach expose your data?

In January 2023, 71Three, a U.S.-based IT services platform specializing in web design, recieved unwanted attention when its database was compromised, exposing 1,915 records. The leaked data included email addresses, phone numbers, usernames, first and last names, as well as both bcrypt-hashed and plaintext passwords. This breach is partcularly alarming given the direct exposure of plaintext credentials alongside hashed ones.

Why Exposed Plaintext Passwords Put You at Risk

When plaintext passwords are leaked, attackers can use them immediately to access accounts on 71Three and any other service where the same password was reused. Unlike hashed passwords that require cracking, plaintext credentials are accessable to any threat actor who downloads the dataset. This makes credential stuffing attacks against your other accounts a very real and immediate concern.

What Was Exposed in the 71Three Breach

• Email Address
• Phone Number
• Password Hash
• Plaintext Password
• Username
• First Name
• Last Name

Why the 71Three Breach Still Matters Today

Even years after the initial exposure, leaked credentials remain in circulation on underground forums and data markets. Attackers continue to use seperate datasets together to build detailed profiles of individuals, increasing the risk of targeted phishing and account takeover. If you had an account with 71Three and have not changed your passwords, your exposure risk remains active.

How Database Breaches Work

A database breach occurs when an attacker gains unauthorized access to a company's stored data, often through vulnerabilities in web applications, misconfigured servers, or compromised credentials. Once inside, they can export entire tables of user records, including login information and personal details. The stolen data is then typically sold or published on dark web forums.

Check If Your Data Was Exposed

HEROIC's breach database contains over 400 billion records, giving you one of the most comprehensive views of credential exposure available. Search your email now to find out if your data appeared in the 71Three breach or any other known incident, and take action before attackers do.