cliqNship

We noticed the re-emergence of a dataset originating from cliqNship, a defunct Philippine shipping platform, on a prominent dark web forum. This breach, dating back to August 21, 2018, exposed 5,563 unique records. What struck us was the continued utility of this older data, particularly the inclusion of MD5 hashed passwords, which, while deprecated, can still be susceptible to brute-force attacks or credential stuffing if users have reused their passwords across other services. The nature of the exposed data points towards a direct database compromise rather than a more sophisticated exfiltration method.

The cliqNship breach, discovered on August 21, 2018, involved a direct database compromise. A total of 5,563 records were exfiltrated, containing email addresses and MD5 hashed passwords. The source structure indicates a direct dump of user credentials from the platform's backend. The significance of this leak lies in its potential to be weaponized as a combolist. Even though cliqNship is no longer operational, the email addresses and particularly the password hashes can be leveraged by threat actors for credential stuffing attacks against other online services where users may have reused their credentials. The MD5 hashing, while weak by modern standards, still presents a tangible risk when paired with email addresses, enabling attackers to test common password patterns or utilize pre-computed rainbow tables.

While this specific cliqNship breach did not generate significant mainstream news coverage at the time of its initial discovery, its reappearance on hacking forums is consistent with the ongoing trend of older, less secure datasets being recirculated and utilized by cybercriminals. Research into MD5 hashing vulnerabilities consistently highlights its susceptibility to brute-force and dictionary attacks, especially when combined with lists of common passwords. The practice of password reuse across different platforms remains a pervasive issue, amplifying the impact of such seemingly minor breaches into broader security risks for individuals and organizations alike.