EazySubs Security Breach Exposes User Emails and Passwords

HEROIC's DarkHive intelligence system discovered the EazySubs data breach, exposing 34,380 records. The breach occured in November 2011 and affected users of EazySubs, a social media promotion platform based in the United States. Leaked data included email addresses, usernames, and hashed passwords.

Why This Is Dangerous

Hashed passwords can be cracked using rainbow tables or brute force tools, especially when older or weaker hashing algorithms were used at the time of the breach. Attackers who crack these hashes gain working passwords that can be tested against email providers, social media accounts, and financial services. The email addresses also enable targeted phishing campaigns designed to look like legitmate communication from services the victim actually uses.

What Was Exposed

• Hash Type
• Email Address
• Username
• Passwords (hashed)

Why This Matters

Even smaller breaches like EazySubs contribute to the massive credential pools that fuel automated account takeover attacks across the internet. Users who reused thier passwords on other platforms face ongoing risk of account compromise long after the original breach. The combination of username and email enables identity reconstruction attacks where fraudsters piece together profiles from multiple leaked sources to commit financial fraud.

How Database Breaches Work

Web application platforms in 2011 frequently stored passwords using weak hashing algorithms without proper salting, making cracking faster and more effective for attackers. Criminals gain access through SQL injection or administrative credential theft, extract the user database, and then run the hashes through cracking software offline. The resulting plaintext credentials get added to combo lists distributed across hacking forums and used in automated stuffing attacks against dozens of platforms simultaneously.

Check If You Are Affected

HEROIC offers a free identity scanner that searches over 400 billion records, including data from breaches like EazySubs. Visit heroic.com to scan your email address and find out if your information was exposed.