Researchers Link BT Sport to 70 Exposed Plaintext Passwords

HEROIC analysts have logged a database breach tied to BT Sport, the UK sports streaming service, as part of our breach intelligence tracking. The breach exposed 70 accounts, with a recorded leak date of October 6, 2015. Exposed data includes email addresses and passwords, both stored in plaintext with no hashing or encryption applied.

Why the BT Sport Leak Is Dangerous

A plaintext password leaves nothing for an attacker to figure out. The password in this dataset is exactly what each of these 70 account holders typed when they signed up for BT Sport, ready to be tried immediately on the streaming service itself or on any other account where the same password might have been reused, from email to banking apps.

What Was Exposed in the BT Sport Database

• Email addresses
• Passwords, stored in plaintext with no hashing or encryption

Why a Small Leak Like This Still Matters

Streaming accounts are often tied to a saved payment card and sometimes shared across a household, which makes them a genuinely useful target even in a small leak like this one. If the exposed password was reused anywhere else, an attacker can attempt account takeover, unauthorized purchases, or gain a foothold for further identity theft using the confirmed email address as a starting point.

How a Plaintext Password Breach Happens

This incident is classified as a database breach, meaning an attacker gained direct access to backend systems and extracted account records rather than collecting them one at a time. Storing passwords in plaintext is a serious security failure regardless of how many accounts are involved, since it means the platform never protected user credentials at all, even before this exposure occurred.

Check If You Were Affected by the BT Sport Breach

If you have ever had a BT Sport account, it is worth checking whether your information was part of this exposure. HEROIC's free breach scanner checks your email address against a database of more than 400 billion breached records, including this one, and shows you exactly where your data has surfaced. Run a free scan to confirm your exposure and update any passwords you may have reused.