CineHello Breach: 1.05 Million Film Industry Accounts Exposed

HEROIC analysts identified 1,055,376 records from CineHello (cinehello.com) surfacing on May 29, 2025. The database leak contains email addresses, usernames, phone numbers, IP addresses, gender, and MD5 password hashes belonging to members of China's professional community for film and television industry practitioners.

Why the CineHello Breach Is Dangerous

The passwords in this dump are hashed with MD5, an algorithm that is effectively broken. Commodity cracking rigs convert most MD5 hashes into plaintext in minutes using rainbow tables or GPU brute force. That means this breach is only a short step away from fully exposed credentials tied to emails, phone numbers, and professional identities.

What Was Exposed in the CineHello Dump

• Email addresses
• Phone numbers
• Usernames
• IP addresses
• Gender
• MD5 password hashes

Why This Matters

Over a million cracked MD5 passwords fuel credential stuffing, account takeover, identity theft, and fraud. Because the victims are film and TV industry professionals, the dataset is also prime bait for spear phishing tied to projects, payments, and studio accounts. Reused passwords widen the attack surface into email, banking, and corporate tools.

How Database Breaches Happen

Consumer platforms like CineHello run large web applications backed by user databases. Common entry points include SQL injection, exposed admin panels, stolen developer credentials, and unpatched third-party software. Weak password storage such as unsalted MD5 turns a database exfiltration into a credential stuffing campaign within days, as attackers crack hashes and try the results across banking, email, and social platforms.

Check If You Are Affected

Search your email in HEROIC's breach scanner, which indexes more than 400 billion records across thousands of data breaches. If you match, change your CineHello password immediately, rotate any site that reused it, and enable multi-factor authentication on email, banking, and work accounts.