If You Shop at Copenhagen Bath, This Password Leak Affects You

HEROIC analysts found a database leak connected to Copenhagen Bath, the Danish furniture designer and manufacturer, after it surfaced on June 22, 2024. The leak includes 3,017 identified records out of a larger data set, and it contains names, email addresses, phone numbers, and bcrypt-hashed passwords tied to customer accounts.

Why This Is Dangerous

If you have ever ordered furniture from Copenhagen Bath, this leak puts your name, contact details, and password hash in the hands of anyone who downloads the file. Bcrypt is a strong hashing method, but it is not unbreakable, and a weak or reused password can still be cracked offline given enough time. Once cracked, that password paired with your email and phone number becomes a tool for impersonation, not just a way into your Copenhagen Bath account.

What Was Exposed

• Email addresses
• Phone numbers
• First and last names
• Password hashes (bcrypt)

Why This Matters

You might think a furniture retailer breach matters less than a bank breach, but the risk to you personally comes down to one habit: password reuse. If your Copenhagen Bath password matches the one on your email or online banking, an attacker who cracks this hash can attempt credential stuffing against those higher-value accounts. Your name and phone number also make you a target for phishing messages designed to look like they come from a delivery service or retailer you already trust.

How Database Breaches Happen

This is classified as a database breach, meaning attackers likely accessed Copenhagen Bath's systems directly rather than targeting individual shoppers. Retailers and e-commerce platforms are frequent targets because their databases hold ready-made lists of active email addresses, phone numbers, and passwords in one place. A single vulnerability, an outdated plugin, a misconfigured server, or a stolen admin login, is often all it takes for an attacker to copy the entire customer table.

Check If You Are Affected

If you have shopped with Copenhagen Bath, take a minute to check your exposure. HEROIC's free breach scanner searches more than 400 billion leaked records to show you instantly whether your email and password have surfaced in this or any other breach.