APE Raccorderie: 7,290 Accounts Quietly Circulating Since 2018

In August 2018, HEROIC identified 7,290 records from APE Raccorderie, an Italian manufacturer of plumbing, heating, and gas pipe fitting systems. The data was posted on a prominent cybercrime forum and contained email addresses and Drupal 7 password hashes.

Why the APE Raccorderie Breach Is Dangerous

Drupal 7 uses a password hashing scheme based on MD5, making hashes susceptible to brute force and dictionary attacks. With email addresses paired with cracked passwords, attackers can attempt credential stuffing against email providers, business platforms, and any other service where the same credentials were reused. Industrial and manufacturing sector employees often use work email addresses for external registrations, creating additional risk to corporate systems.

What Was Exposed in the APE Raccorderie Leak

• Email addresses
• Password hashes (Drupal 7)

Why This APE Raccorderie Data Puts You at Risk

This data has been circulating in attacker communities since 2018, giving threat actors years to crack these hashes and compile them into credential stuffing lists. The industrial sector often has users who maintain consistent credentials across platforms, making even older breaches a current threat to active accounts.

How Database Breaches Work

Database breaches occur when attackers exploit vulnerabilities in web applications -- SQL injection, misconfigured access controls, or compromised admin credentials -- to extract the underlying user database. The stolen records are then packaged and distributed on hacking forums or Telegram channels for further exploitation.

Check If Your Data Was Exposed

HEROIC operates one of the world's largest breach databases, covering more than 400 billion leaked records. Use HEROIC's free breach scanner to check if your email address or credentials appeared in the APE Raccorderie leak or thousands of other breaches in our database.