How the AmiHome Hack Exposed Password Hashes for 433,811 People

In February 2023, AmiHome, a Belarusian e-commerce platform specializing in furniture and home goods, suffered a database breach that exposed the personal data of 433,811 users. The breach leaked email addresses, phone numbers, usernames, full names, gender information, and MD5 hashed passwords, representing a significant exposure of customer records from this regional online retailer. Incidents of this scale occured with increasing frequency against e-commerce platforms throughout 2023, reflecting persistent vulnerabilities in how customer data is stored and protected.

Why MD5 Password Hashes Are Especially Dangerous

Unlike stronger hashing algorithms, MD5 is a fast and well-documented function that modern hardware can crack at billions of guesses per second. The AmiHome breach is partcularly alarming because MD5 hashed passwords offer significantly less protection than modern alternatives, meaning attackers can often recover the original plaintext password within hours or days using widely available cracking tools. Anyone who used their AmiHome password on any other platform should treat those accounts as compromised and change their passwords immediately.

What Was Exposed in the AmiHome Breach

• Email Address
• Phone Number
• Password Hash
• Username
• First Name
• Last Name
• Gender

Why the AmiHome Breach Still Matters Today

With over 433,000 unique records exposed, the AmiHome dataset is large enough to be sold, shared, and repackaged across multiple criminal marketplaces many times over. Phone numbers and usernames combined with crackable MD5 hashes give attackers everything they need to conduct credential stuffing campaigns, targeted phishing, and account takeover attacks across a wide range of services that affected users may have registered on with the same credentials.

How Database Breaches Work

A database breach occurs when an attacker gains unauthorized access to a company's stored data, typically by exploiting software vulnerabilities, misconfigured servers, or stolen administrative credentials. Once inside, the attacker exports customer records directly from the database. The stolen data is then sold or published on underground forums where other criminals can purchase and exploit it.

Check If Your Data Was Exposed

HEROIC's breach search engine scans a database of over 400 billion compromised records to tell you exactly which breaches have exposed your personal information. If you had an account with AmiHome or used the same email, username, or password on other platforms, check your exposure now and change any reused credentials before attackers can exploit them.