11,616 ApnaMBA Users Now Face Account Takeover After 2018 Breach

In August 2018, HEROIC identified 11,616 records from ApnaMBA, an Indian online platform facilitating MBA admissions and consultancy services. The data was shared on a prominent cybercrime forum and contained email addresses and plaintext passwords.

Why the ApnaMBA Breach Is Dangerous

Plaintext passwords require no cracking. Each of the 11,616 credentials is immediately usable against any service where the same email and password combination was reused. MBA applicants and education-sector users commonly access multiple platforms -- university portals, job boards, professional networks -- with the same credentials, making this breach a direct pathway to multiple account takeovers.

What Was Exposed in the ApnaMBA Leak

• Email addresses
• Plaintext passwords

Why This ApnaMBA Data Puts You at Risk

Credentials exposed in plaintext are the most dangerous form of breach data -- there is no cracking delay. Anyone who used the same email and password on another platform and has not changed it since 2018 remains at immediate risk. This dataset has been circulating on cybercrime forums since August 2018, meaning it has already been used in multiple credential stuffing campaigns.

How Database Breaches Work

Database breaches occur when attackers exploit vulnerabilities in web applications -- SQL injection, misconfigured access controls, or compromised admin credentials -- to extract the underlying user database. The stolen records are then packaged and distributed on hacking forums or Telegram channels for further exploitation.

Check If Your Data Was Exposed

HEROIC operates one of the world's largest breach databases, covering more than 400 billion leaked records. Use HEROIC's free breach scanner to check if your email address or credentials appeared in the ApnaMBA leak or thousands of other breaches in our database.