Nepali Vendors Targeted in the DOR E-Procurement Website Breach

HEROIC analysts identified the DOR E-Procurement Website breach, an incident dating back to January 23, 2015, that exposed 7,118 records tied to Nepal's Department of Revenue online bidding platform. The compromised data included email addresses, usernames, and passwords hashed with MD5.

Why MD5 Hashing Failed to Protect These Bidder Accounts

MD5 is a fast algorithm, and that speed works in an attacker's favor. Modern computers can test billions of MD5 combinations per second, making it possible to crack weak or commonly used passwords in a short amount of time. Once cracked, a password is immediately paired with the matching email and username from the same account.

What Was Exposed in the DOR E-Procurement Breach

• Email addresses
• Usernames
• MD5-hashed passwords

Why This Matters for Vendors and Bidders

Accounts on a government procurement platform often belong to business owners and vendors submitting bids for contracts, not just casual users. If a password from this breach is cracked and matches a login used on business email or other vendor accounts, an attacker could attempt credential stuffing to gain access to sensitive bidding information or impersonate a vendor. For individuals, reused passwords also open the door to account takeover, identity theft, and financial fraud.

How a Database Breach Like This Happens

A database breach occurs when an attacker gains unauthorized access to the system storing a website's user records, often through an unpatched vulnerability, a misconfigured server, or stolen administrator credentials. Once inside, the attacker can extract the full user table, including emails, usernames, and password hashes, in a single operation. Government portals are frequent targets because they often run on systems that aren't updated as regularly as they should be.

Check If Your Email Was Exposed in This or Any Other Breach

Don't wait to find out the hard way. HEROIC's free breach scanner checks your email against a database of more than 400 billion leaked records, including this DOR E-Procurement Website breach, and tells you immediately if you're affected. If you find a match, change that password everywhere you've reused it and turn on multi-factor authentication wherever it's offered. Scan now to check your exposure.