The DiskUnion Breach Put 699K Plaintext Email and Password Pairs Online in 2022

In June 2022, the Japanese music retailer DiskUnion suffered a database breach that occured without public disclosure for months, leaving 699,825 customers exposed. The stolen records contained full names, email addresses, phone numbers, and passwords stored in plaintext, meaning anyone who obtained the data had immediate, unobstructed access to real user credentials.

What Attackers Can Do With DiskUnion Account Data

Plaintext passwords are the worst possible outcome in any breach. With DiskUnion's data, attackers can log directly into victim accounts, then test those same email and password combinations against Gmail, Amazon, PayPal, and banking apps. This type of credential stuffing is widely accessable even to low-skill threat actors using freely available automation tools.

What Was Exposed in the DiskUnion Breach

• Email Address
• Phone Number
• Plaintext Password
• First Name
• Last Name

Why the DiskUnion Breach Still Matters Today

Plaintext passwords never expire from leaked databases. Every combination of email and password in this dataset remains a usable weapon against any account where the victim reused that password. People who registered with DiskUnion before 2022 and have not changed passwords elsewhere remain at risk of account takeover on entirely unrelated platforms today.

How a Database Breach Works

A database breach typically begins when an attacker exploits a vulnerability in a web application or server, such as an unpatched dependency, misconfigured access control, or stolen admin credentials. Once they gain access to the backend, they can run queries to export all stored user records. Those exports are then packaged and sold or distributed through dark web forums, where they are purchased and reused in automated attack campaigns.

Check If Your Data Was Exposed

HEROIC monitors over 400 billion exposed records, including breach data from DiskUnion and thousands of similar incidents across every industry. Visit HEROIC.com to run a free dark web scan and find out instantly whether your email or passwords have been compromised in this or any other known breach.