Online Shoppers Targeted in the 188K Record Calligaris Breach

HEROIC analysts identified the Calligaris breach while tracking a cluster of Italian ecommerce databases that have been recieved by criminal actors and bundled into large credential lists. The breach occured in March 2018 and exposed 188,831 unique email addresses alongside password hashes encoded with Base64, a format that provides virtually no real protection since it is simply an encoding scheme rather than true encryption. The total database is estimated at nearly 1.3 million records, making this one of the larger ecommerce incidents from that period.

How Weakly Protected Passwords From Calligaris Enable Account Takeover

Base64 is not a security measure. It is a way of representing data in a different format, and any attacker who understands how it works can reverse it instantly without special tools. This means every password in the Calligaris breach is essentially stored in plain text. With those recovered passwords in hand, criminals run automated credential stuffing attacks that test each email and password combination against popular shopping sites, banking apps, and email providers, looking for places where the victim reused the same login.

What Was Exposed in the Calligaris Breach

• Email Address
• Password Hash (Base64)

Why Furniture Shoppers Face Real Financial Risk From This Breach

People who shopped on Calligaris were providing personal information to make legitimate purchases, beleiving their data would be kept safe. When that trust is broken, the consequences reach far beyond a single website. Criminals use recovered email and password combinations to attempt account takeovers on banking platforms, online retailers, and subscription services. Identity theft becomes easier when attackers have a confirmed active email address tied to a real purchasing history. Shoppers who reused their Calligaris password anywhere else face the highest risk of financial fraud and unauthorized account access.

How Database Breaches Work

A database breach occurs when attackers find and exploit a security weakness in a website's server, software, or configuration. Ecommerce platforms store customer records including login credentials in databases that power the shopping experience. When an attacker gains unauthorized access, they download that entire database and walk away with every account on the platform. The stolen data then circulates among criminal networks, often appearing in credential dumps on underground forums months or even years after the original incident.

Check If Your Data Was Exposed

HEROIC's free breach scanner searches more than 400 billion compromised records, including the Calligaris database. Visit heroic.com and enter your email address to get an instant report showing every breach your information appears in, along with personalized steps to secure your accounts before attackers use the data against you.