The Aman Electronic Platform Breach Handed Attackers Plaintext Logins

HEROIC found 106 records in the Aman Electronic Platform breach on March 19, 2025, exposing email addresses, phone numbers, plaintext passwords, first and last names, and birthdays tied to the Iraqi service provider. Although the count is small, the record depth is severe, giving attackers a full identity package for each affected user.

Why This Plaintext Password Leak Is Dangerous

Plaintext passwords skip every defensive layer. There is no hash to crack, no salt to strip. Combined with a real birthday, a full name, and a verified phone number, each record is a ready-made identity kit. Attackers can answer knowledge-based authentication prompts, pass call-center verification, and take over banking, telecom, and government portals linked to the same user in Iraq.

What Was Exposed in the Aman Electronic Platform Breach

• Email addresses tied to platform accounts
• Phone numbers used for verification
• Plaintext passwords with no hashing applied
• First names, last names, and birthdays

Why This Matters

This record set fuels credential stuffing against reused logins, account takeover of payment and utility apps, full identity theft using the name and birthday, and fraud targeting the mobile number through SIM swap or OTP interception. Because Aman serves a regional population, the data also supports localized scams that reference real service history.

How a Database Breach Works

A database breach occurs when attackers reach the backend that stores user records, often through SQL injection, exposed admin panels, stolen developer credentials, or misconfigured cloud storage. Once inside, they export the user tables as CSV or SQL and sell the dump on dark web forums. Plaintext password storage, as seen here, turns a routine breach into a universal credential disaster.

Check If You Are Affected

If you registered with Aman Electronic Platform, change that password everywhere you reused it, turn on multi-factor authentication, and watch for phishing calls referencing your details. You can search the HEROIC scanner, which indexes more than 400 billion breached records, to see whether your identity appears in the Aman dataset or any related Iraqi leaks.