HEROIC Analysts Found the Asan Kadr Leak: 5,035 Accounts Exposed

HEROIC analysts identified a database breach tied to Asan Kadr, an Azerbaijani employment platform, dated September 18, 2015. The breach exposed 5,035 accounts, including email addresses and SHA-1 hashed passwords.

Why This Is Dangerous

SHA-1 is an older hashing algorithm that modern computing power can crack relatively quickly, especially for passwords that are short or based on common words. Anyone in this leak whose password was crackable now has their email and password combination effectively exposed in plain form, giving an attacker a direct route into that account and any other account using the same password.

What Was Exposed

• Email addresses
• SHA-1 hashed passwords

Why This Matters

Because this was an employment platform, the accounts involved were likely tied to job seekers actively sharing personal and professional information to find work. If an attacker cracks a password from this leak, they can attempt credential stuffing against the same person's email, banking, or other accounts, since password reuse remains extremely common. A compromised job platform account can also be used to impersonate the victim in professional contexts, adding a layer of risk beyond typical financial fraud.

How Database Breaches Like This Happen

This incident is classified as a database breach, meaning an attacker gained direct access to Asan Kadr's backend systems and extracted the stored account records in bulk. The use of SHA-1 hashing shows the platform made some effort to protect passwords, but SHA-1 has been considered weak for security purposes for years, since specialized hardware can crack large batches of these hashes relatively cheaply.

Check If You Are Affected

If you have ever used Asan Kadr or a similar employment platform, it is worth checking whether your information appears in this leak. HEROIC's free breach scanner searches a database of more than 400 billion breached records to tell you instantly if your email address has been exposed, so you can update any passwords that might still be at risk.