Dark Web Intelligence: England Cricket icoachcricket Breach Exposes 43K Credentials

HEROIC analysts found that the England Cricket icoachcricket platform suffered a database breach that exposed 43,384 records, leaked on July 4, 2024. The compromised data includes email addresses and password hashes stored using MD5 with salt and bcrypt algorithms. This incident affects members of the England and Wales Cricket Board's coaching platform and poses real risks to account security for those who may have reused credentials across other services.

Why This Is Dangerous

The presence of MD5-salted password hashes alongside bcrypt hashes signals an inconsistent security posture. MD5, even when salted, is computationally inexpensive to crack using modern GPU-based tools. Attackers who obtain these hashes can run offline cracking operations without ever alerting the target platform, giving victims no warning before their accounts are compromised. Bcrypt hashes are far more resistant, but the mixed use of both algorithms means a significant share of the 43,384 affected records may be cracked with relatively modest effort.

What Was Exposed

• Email addresses
• Password hashes (MD5 with salt and bcrypt)

Why This Matters

Cracked password hashes from this breach can be fed directly into credential stuffing tools that test the same email-and-password combinations across banking, email, e-commerce, and social media platforms. Successful account takeovers can lead to financial fraud, identity theft, and unauthorized access to additional personal data. Even users who have not reused passwords face phishing risks, as their confirmed email addresses are now in active threat actor databases.

How Database Breaches Work

A database breach occurs when an attacker gains unauthorized access to the underlying data store of a web application. Common entry points include SQL injection vulnerabilities, compromised administrative credentials, exposed database ports, and unpatched software. Once inside, attackers can export entire tables of user records within minutes. The data is then packaged and sold or published on dark web forums, where other threat actors purchase it for downstream attacks.

Check If You Are Affected

HEROIC offers a free identity scanner that checks your email address against a database of over 400 billion compromised records, including breaches like this one. If your credentials appeared in the England Cricket icoachcricket breach, you will be notified immediately. Visit heroic.com to scan your email address at no cost and take action before attackers do.