A Quiet Alarm: Easycep’s 12,235 Customer Records Quietly Went Public

HEROIC analysts flagged a data exposure originating from Easycep, a Turkish e-commerce platform specializing in buying, selling, and refurbishing smartphones, on January 1, 2025. The leaked database contained 12,235 customer records with email addresses, phone numbers, first names, last names, and birthdays. Though the leak drew little public attention at the time, the combination of contact details and birthdates makes the dataset a long-term identity theft hazard.

Why This Easycep Database Breach Is Dangerous

The danger of this breach lies in what attackers can do with the quieter data points. Birthdays remain one of the most commonly used identity verification factors across Turkish banks, telecoms, and government services. Pair a birthday with a verified name, phone number, and email and an attacker has enough to pass knowledge-based authentication on many platforms. For a marketplace tied to high-resale-value electronics, criminals can also hijack pending orders, reroute deliveries, and run refund scams that drain seller accounts.

What Was Exposed in Easycep

• Email addresses from 12,235 Easycep customers
• Phone numbers used for order confirmations and account recovery
• First and last names tied to buyer and seller profiles
• Birthdays, frequently used for KYC and identity verification

Why This Matters

No passwords leaked, but the PII set is plenty for identity theft, account takeover on related services, and targeted phishing. Attackers can impersonate Easycep support to request payment redirections, send fraudulent refund links, or trigger SIM swap attempts using the combination of phone number and birthday. Turkish consumers are also exposed to cross-border fraud because the dataset aligns cleanly with data requested by international payment processors.

How Database Breaches Work

Database compromises against e-commerce sites typically begin with a vulnerable admin endpoint, an unpatched plugin, or credentials harvested from an employee infostealer infection. Once inside, attackers exfiltrate user tables in bulk using legitimate database tools that evade basic detection. Turkish marketplaces have become especially attractive targets because of strong resale value on refurbished electronics and a growing base of cross-border buyers who are harder to warn quickly.

Check If You Are Affected

HEROIC indexes more than 400 billion compromised records from dark web forums, breach compilations, and infostealer logs. Run a free scan to check whether your email address or phone number appeared in the Easycep breach and to see any related leaks that put your identity at risk.