12,684 Plaintext Passwords Stored Unprotected in the Amlaan Breach

In August 2018, HEROIC identified 12,684 records from Amlaan, a now-defunct Indian employment platform. The data was shared on a prominent hacking forum and contained email addresses and plaintext passwords.

Why the Amlaan Breach Is Dangerous

Plaintext passwords from an employment platform are particularly dangerous -- job seekers often register using their primary email address and a commonly reused password. Attackers can immediately use these credentials to attempt logins on email accounts, LinkedIn, banking apps, and any other service sharing those credentials.

What Was Exposed in the Amlaan Leak

• Email addresses
• Plaintext passwords

Why This Amlaan Data Puts You at Risk

Even though Amlaan is no longer operational, the 12,684 exposed plaintext passwords remain active on every other service where victims never changed them. Job seekers who registered their work email address with Amlaan face the additional risk of business email compromise if attackers use those credentials to access corporate email or HR platforms.

How Database Breaches Work

Attackers exploited a vulnerability in the Amlaan platform's database, extracting 12,684 user records stored with passwords in plaintext rather than secure hashing. The data was published on a prominent hacking forum and incorporated into credential stuffing lists -- automated tools that test stolen credentials against hundreds of other platforms simultaneously.

Check If Your Data Was Exposed

HEROIC operates one of the world's largest breach databases, covering more than 400 billion leaked records. Use HEROIC's free breach scanner to check if your email address or credentials appeared in the Amlaan leak or thousands of other breaches in our database.