The Artistic Countertops Dump: 103,280 Stolen Login Credentials Hit the Dark Web

HEROIC analysts found a database dump linked to Artistic Countertops, a US-based eCommerce company selling custom countertop products, posted to underground data markets in May 2023. The breach occured on 09-May-2023 and exposed 103,280 records. What made this incident particularly serious was the inclusion of MD5-hashed passwords alongside a broad set of personal and business identifiers, a combination that puts both individual customers and the businesses they represent at risk.

MD5 Passwords and Full Profiles: Why the Artistic Countertops Breach Is a Serious Threat

MD5 is not a secure hashing algorithm by modern standards. It was not designed for password storage, and it is accessable to cracking via precomputed rainbow tables and high-speed GPU attacks within minutes for most common passwords. When attackers crack an MD5 hash, they get the original password in plaintext. Paired with email addresses, phone numbers, and business details from this breach, the result is a ready-made kit for targeted phishing, account takeover, and business email compromise.

What Was Exposed in the Artistic Countertops Breach

• Email addresses
• MD5 password hashes
• First and last names
• Phone numbers
• IP addresses
• Gender

Why This Matters for Customers and Businesses

Artistic Countertops serves a mix of residential and commercial customers, meaning business email addresses and company contact info are likely in this dataset. Credential stuffing attacks using cracked MD5 passwords can lead to account takeovers at other services where users recieved the same password. Business contacts are especially vulnerable to follow-on phishing or invoice fraud once attackers have confirmed professional email addresses tied to real names and organizations.

How Database Breaches Involving Weak Hashes Work

When a company stores passwords using MD5 without proper salting, every matching password produces the same hash. Attackers compile massive lookup tables of pre-hashed common passwords and can reverse millions of hashes in seconds. Even salted MD5 is considered too weak for modern threat models. Once cracked, the seperate plaintext passwords are loaded into credential stuffing tools and fired at hundreds of other websites automatically.

Check If Your Data Was Exposed

HEROIC's free breach scanner checks your email against more than 400 billion compromised records, including data from the Artistic Countertops breach. Run a free scan now to see what has been exposed and take action before someone else does.