124 Supporters at Risk in the Emirates Cancer Society Breach

HEROIC discovered 124 records in Emirates Cancer Society on January 17, 2025, leaking email addresses, phone numbers, first and last names, and password hashes pulled from the UAE non-profit's user database.

Why This Emirates Cancer Society Breach Is Dangerous

Small is not safe when the data is this personal. The leaked list ties real names to a cancer-focused service, a detail that attackers can weaponize for targeted phishing, impersonation of medical staff, or fake donation scams aimed at supporters and patients.

What Was Exposed in Emirates Cancer Society

• Email addresses tied to UAE cancer support platform users
• Phone numbers usable for vishing and smishing campaigns
• First and last names, enabling highly personalized lures
• Password hashes that may be cracked if weak algorithms were used

Why This Matters

Healthcare-adjacent leaks carry outsized reputational and emotional damage. Supporters and patients expect privacy from cancer charities, and even a 124-record exposure can trigger regulatory scrutiny under UAE data protection laws and create lasting trust damage for the non-profit.

How Database Breaches of Non-Profits Happen

Attackers scan for outdated CMS installations, unpatched plugins, and exposed admin panels on charity websites. Once inside, they run SQL dumps or steal database credentials and offload the table to a dark web forum, often within hours of initial access.

Check If You Are Affected

HEROIC scans more than 400 billion compromised records across the surface, deep, and dark web. Run your email through the HEROIC exposure scanner to see if your Emirates Cancer Society account data was leaked, then rotate any reused passwords and stay alert to donation-related phishing.