Ethernet Academy

Our analysis has identified a significant data exposure event impacting the former Ethernet Academy, a US-based educational and community portal. The breach, discovered on August 26, 2018, involved the exfiltration of over 10,000 user records. What struck us as particularly noteworthy was the age of the compromised data and its subsequent dissemination on a public hacking forum, suggesting a potential for long-term credential stuffing attacks against associated services.

The breach at Ethernet Academy, which has since ceased operations, resulted in the compromise of approximately 10,373 records. The exposed data primarily consists of email addresses and their corresponding MD5 hashed passwords. This type of legacy hashing algorithm is particularly vulnerable to brute-force and dictionary attacks, especially when combined with readily available password lists. The source structure indicates a direct database compromise, and the leak location was a well-known hacking forum, a common distribution point for such datasets. The threat theme here is clear: the reuse of credentials across platforms means that even defunct services can serve as a vector for compromising active accounts.

While specific news coverage directly detailing this particular Ethernet Academy breach is sparse due to its age and the nature of the leak, the broader trend of educational and community platforms being targeted for credential harvesting is well-documented. Security researchers have consistently highlighted the risks associated with MD5 hashing, with numerous reports detailing its susceptibility to cracking. This incident aligns with a pattern of attackers compiling and distributing large datasets of compromised credentials, often for use in credential stuffing campaigns against popular online services.