Baverstam Breach Leaves 1,209 Logins Readable in Plain Text

HEROIC analysts found 1,209 login records reportedly tied to the photography site Baverstam circulating with their passwords left in plain, unscrambled text. Anyone who gets this file does not need to crack anything; the password is right there next to the email it belongs to. The only way to know if your account is one of them is to scan your email.

Why Plaintext Makes This Leak Worse

Most breaches at least force an attacker to crack a hash before a password becomes usable. Here, that step is skipped entirely. The password works the moment someone opens the file, which is why a plaintext leak moves faster from exposure to actual account compromise than almost any other kind of breach.

What This File Actually Contains

• Email addresses: let an attacker identify the account holder and target them directly.
• Plaintext passwords: usable immediately, without any cracking effort.

Where the Real Danger Comes From

The real exposure is anywhere else you used the same password. Attackers routinely test leaked email and password pairs against popular email, banking and shopping sites, a tactic that succeeds often enough to make password reuse one of the biggest risks in any breach, regardless of how small the original site was.

How This Type of File Gets Made

This record set is reported to have been taken from Baverstam's own systems, not pulled from an infected device. Files like this are typically put up for sale or trade on a hacking forum first, then copied into Telegram channels, which is the path HEROIC analysts traced this one through.

Is Your Email in the Baverstam Leak?

Start by taking a moment to scan your email and see your information. If your address shows up, change your Baverstam password right away and update it anywhere you have reused it. That goes for personal inboxes and work email addresses alike, since attackers rarely limit themselves to just one account type.