Dunes Realty

We've been tracking a notable increase in breaches targeting smaller, regional businesses – often those that don't have the resources for enterprise-grade security. What struck us about the Dunes Realty breach wasn't the size, at just under 10,000 records, but the age of the breach and its continued relevance in credential stuffing attacks. The data, originally leaked in August 2018, continues to circulate in combolists and hacking forums, making it a persistent risk for password reuse.

Dunes Realty Breach: 9,544 Accounts Fueling Credential Stuffing

The Dunes Realty breach, involving 9,544 records, highlights the long tail of data breaches and their continued impact on the threat landscape. The breach was initially reported in August 2018 after the compromised data surfaced on a hacking forum. The exposed information included email addresses and MD5 hashed passwords. While MD5 is a weak hashing algorithm easily cracked with modern tools, the re-use of these credentials across other platforms poses an ongoing risk.

Our team flagged this incident due to its presence in multiple recent combolists used in credential stuffing attacks. The age of the breach suggests that many users may not have updated their passwords since the incident, making them vulnerable to account takeover. The relatively small size of the breach, compared to mega-breaches affecting millions, underscores that even smaller breaches can have significant repercussions due to password reuse.

This incident underscores the importance of proactive password monitoring and enforcement of strong, unique passwords across all user accounts. The continued circulation of this data highlights the enduring threat posed by older breaches, particularly when combined with automated attack tools.

• Total records exposed: 9,544
• Types of data included: Email Address, Password Hash
• Sensitive content types: None explicitly, but PII implied due to user accounts
• Source structure: Likely a database export
• Leak location(s): Prominent hacking forum (unspecified)
• Date of first appearance: 26-Aug-2018

External Context & Supporting Evidence

Data breaches involving weak password hashing algorithms like MD5 are a recurring theme. Security researchers have repeatedly demonstrated the ease with which MD5 hashes can be cracked using rainbow tables and other techniques. The use of such weak algorithms underscores a lack of security awareness and investment in proper data protection practices.

While specific details on the forum where the data was initially leaked are unavailable, the mention of a "prominent hacking forum" suggests a wide distribution of the data. This increases the likelihood that the data is being actively used in credential stuffing attacks targeting various online services. BleepingComputer has covered similar incidents involving older breaches resurfacing in credential stuffing campaigns, highlighting the persistence of this threat vector.