Security Researchers Found 15,561 Alpina Florist Records Online

In August 2018, HEROIC identified 15,561 records from Alpina Florist, a Netherlands-based flower shop. The data surfaced on a prominent cybercrime forum and contained email addresses, plaintext passwords, and MD5-hashed passwords.

Why the Alpina Florist Breach Is Dangerous

Attackers receiving this dataset hold two types of ready-to-use credentials. Plaintext passwords are immediately deployable in automated login tools -- no cracking required. The MD5-hashed passwords, while requiring additional processing, fall quickly to rainbow table lookups given how weak MD5 is without salting. Both sets feed directly into credential stuffing campaigns targeting banking, retail, and email services.

What Was Exposed in the Alpina Florist Leak

• Email addresses
• Plaintext passwords
• MD5-hashed passwords

Why This Alpina Florist Data Puts You at Risk

The presence of plaintext passwords makes this breach especially actionable. Credential stuffing bots can test an Alpina Florist email and password combination against hundreds of services within minutes. Victims who reused their Alpina Florist password elsewhere are at immediate risk of account takeover, financial fraud, and unauthorized purchases. Even where passwords differ, email addresses alone enable targeted phishing designed to harvest credentials for other accounts.

How Database Breaches Work

The Alpina Florist breach resulted from unauthorized access to the platform's user database, likely through a web application vulnerability or SQL injection attack. The presence of both plaintext and MD5-hashed passwords suggests inconsistent password storage across the platform. Once extracted, the database was compiled into a combolist and distributed on a cybercrime forum for use in automated attacks against other services.

Check If Your Data Was Exposed

HEROIC operates one of the world's largest breach databases, covering more than 400 billion leaked records. Use HEROIC's free breach scanner to check if your email address or credentials appeared in the Alpina Florist leak or thousands of other breaches in our database.