Easy Readers

We've been tracking the resurgence of older breach datasets in "combolists" — aggregated dumps used for credential stuffing attacks. What struck us about a recent find wasn't the size, but the age and relative obscurity of the source: a small e-commerce platform called Easy Readers, breached in August 2018. The data had been circulating quietly, but we noticed a spike in mentions on several underground forums known for trading credential lists. This suggests the data is being actively used for password spraying campaigns, likely targeting individuals who reuse passwords across multiple online accounts.

Easy Readers Breach: 4.7k Records Resurfacing in Combolists

The Easy Readers breach, initially reported in August 2018, involved the exposure of approximately 4,698 user records. While not a large breach by today's standards, its reappearance in recent combolists highlights the long tail of data breaches and the persistent risk posed by older, seemingly forgotten incidents. The breach was discovered after the compromised information was posted on a popular hacking forum. The fact that this data is now being actively traded and utilized in credential stuffing attacks underscores the importance of proactive monitoring for leaked credentials, even from smaller and older breaches.

• Total records exposed: 4,698
• Types of data included: Email addresses, Base64 encrypted passwords
• Source structure: Likely a database export
• Leak location(s): Popular hacking forum (specific URL unavailable)
• Date of first appearance: August 26, 2018

While details on the initial breach are sparse, its impact is amplified by its presence in combolists. Combolists are frequently used in automated attacks targeting a wide range of online services. Given that the passwords were Base64 encrypted, it is highly likely that they were easily cracked. As noted in numerous reports from sources like Verizon's Data Breach Investigations Report, password reuse remains a significant vulnerability, making these older datasets valuable to attackers. The resurgence of this data is a reminder that even smaller breaches can have lasting consequences, especially when combined with other compromised credentials.