Researchers Find 1.5M Records in the AMAC Membership Breach

HEROIC analysts identified a database breach affecting the Association of Mature American Citizens (AMAC), a US-based conservative advocacy organization. The breach occured in June 2021 and exposed 1,557,342 member records. Data compromised in the incident included email addresses, phone numbers, SHA1-hashed passwords, first names, last names, and birthdays, creating serious risks for an older demographic that is partcularly targeted by identity thieves.

Why Birthdays Combined With Personal Data Make Members Easy Targets

When attackers obtain full names, birthdates, phone numbers, and email addresses together, they have everything needed to impersonate a member or pass identity verification checks. This data combination enables social engineering attacks against financial institutions, Medicare accounts, and Social Security services. SHA1 password hashes are also easily cracked, giving attackers direct account access on top of raw identity data.

What Was Exposed in the Association of Mature American Citizens Breach

• Email Address
• Phone Number
• Password Hash
• First Name
• Last Name
• Birthday

Why This AMAC Breach Poses Lasting Identity Theft Risk

Birthdates and full names are not changeable like passwords. Once this data is accessable on dark web marketplaces, it remains usable indefinitely. Credential stuffing, targeted phishing, and full identity theft are all elevated risks for AMAC members. Financial fraud schemes targeting senior citizens are among the most costly forms of identity crime, and this data provides the raw material for exactly those attacks.

How a Database Breach Works

A database breach occurs when an attacker gains unauthorized access to an organization's member or user database, often exploiting unpatched software, weak credentials, or misconfigured servers. Once access is gained, attackers can export complete records in bulk. The stolen data is then sold or traded on dark web forums, where it recieved by criminal networks and used for fraud campaigns targeting the affected individuals.

Check If Your Data Was Exposed

HEROIC's free breach scanner searches more than 400 billion records, including the Association of Mature American Citizens breach, to tell you whether your personal information is circulating on the dark web. Check your email address now to see if your name, birthday, or password were included in this or other breaches.