One MD5 Database Dump, 8,327 Passwords: The ChromePlay Breach

HEROIC analysts identified a database breach affecting ChromePlay, an eCommerce platform, dated November 1, 2015. The breach exposed 8,327 records, including email addresses, usernames, IP addresses, and passwords hashed with MD5.

Why the ChromePlay Breach Is Dangerous

MD5 is a fast, outdated hashing algorithm that modern hardware can crack in bulk, so the passwords in this leak should be treated as effectively exposed. Because ChromePlay is an eCommerce site, a cracked password could also be tied to saved payment methods or order history on the platform itself, in addition to any other account where the same password was reused.

What Was Exposed in the ChromePlay Leak

• Email addresses
• Usernames
• IP addresses
• Passwords, hashed with MD5

Why This Matters

Even a breach of this size can cause outsized damage if the password is reused. An attacker who cracks an MD5 hash from this dataset can attempt the same email and password combination on banking, email, and shopping accounts through credential stuffing, turning a single small leak into a much bigger problem for the individual involved.

How Database Breaches Like This Happen

A database breach means an attacker gained direct access to the site's backend storage and pulled the user table in one operation. The presence of MD5 hashing, rather than a stronger modern algorithm like bcrypt, indicates ChromePlay's password security had not been updated by the time of this 2015 incident.

Check If You Are Affected

If you ever shopped on or registered with ChromePlay, check your exposure. HEROIC's free breach scanner checks your email against more than 400 billion compromised records, including this one, so you know instantly if a password change is needed.