The cliqNship Breach: 5,563 Email and Password Hashes Exposed

HEROIC analysts found a dataset posted to a hacking forum tied to cliqNship, a now-defunct online shipping and courier booking platform based in the Philippines. The breach dates back to August 21, 2018, and exposed 5,563 records, each containing an email address and an MD5-hashed password.

Why This Is Dangerous

MD5 is an old hashing algorithm that modern computing power can crack quickly, especially using precomputed rainbow tables or brute-force tools. Once cracked, a hash becomes a plain readable password. Paired with the matching email address, that gives an attacker a working login they can try on other sites, even though cliqNship itself no longer operates.

What Was Exposed in the cliqNship Breach

• Email addresses
• MD5 password hashes

Why This Matters

A breach at a defunct courier booking site can seem harmless, but the risk lives in password reuse. If a cracked password from this dataset matches one still in use on an email account, a bank, or a shopping site, the result is credential stuffing that leads straight to account takeover, identity theft, and financial fraud far removed from the original platform.

How a Database and Combolist Breach Like This Works

This incident is classified as a database breach that was later compiled into a combolist, a plain text file pairing email addresses with cracked or hashed passwords for easy reuse by attackers. Someone gained unauthorized access to cliqNship's user database, extracted the stored credentials, and the resulting file was shared on a hacking forum where anyone could download it and attempt to crack the hashes or test the pairs against other services.

Check If You Are Affected

If you ever had a cliqNship account or think your email address could be part of this or another breach, HEROIC's free breach scanner checks it against a database of more than 400 billion leaked records. Run a free scan today, and if your information turns up, change that password everywhere you have reused it.