Experimental Magazine

We've been tracking the resurgence of older breaches in recent weeks, specifically those where credentials were stored in plaintext. What really struck us about this particular incident wasn't the volume of records, but the fact that plaintext passwords from a 2018 breach are *still* circulating and potentially being reused today. This highlights the long tail risk associated with poor password security practices, even years after a breach is initially disclosed. The data had been circulating quietly, but we noticed a spike in its appearance across several underground forums known for credential stuffing attacks.

Experimental Magazine's 2018 Breach: A Cautionary Tale of Plaintext Passwords

In August 2018, Experimental Magazine, a Romanian online lifestyle magazine, suffered a data breach. The breach, which recently resurfaced in several prominent hacking forums, exposed 22,811 records. This incident is particularly concerning because the leaked information included nearly 23,000 unique email addresses and, critically, plaintext passwords. The re-emergence of this data underscores the enduring risk posed by historical breaches, especially when sensitive information like passwords are not properly secured.

The breach was initially discovered on August 21, 2018, and subsequently reported on various security websites at the time. The recent uptick in its circulation caught our attention due to the continued use of plaintext passwords. This poor security practice makes the exposed accounts highly vulnerable to credential stuffing and account takeover attacks, even years later. The data's reappearance across multiple forums suggests it's actively being used in automated attacks targeting various online services.

This incident matters to enterprises now because it highlights the importance of proactive password monitoring and user education. Even seemingly old breaches can have a significant impact if users have reused those credentials across multiple platforms. Furthermore, it emphasizes the need for robust password security practices, including hashing and salting, to mitigate the risk of plaintext password exposure. The re-emergence of this breach aligns with the broader threat theme of "combolists," which are often used in automated credential stuffing attacks against a wide range of online services.

• Total records exposed: 22,811
• Types of data included: Email Address, Plaintext Password
• Source structure: Likely a database dump (details not specified in original report)
• Leak location(s): Prominent hacking forums known for combolist distribution
• Date leaked: 21-Aug-2018

External Context & Supporting Evidence

While specific news outlet coverage of the *original* 2018 breach of Experimental Magazine is limited, the incident is documented on breach notification sites like HaveIBeenPwned.com. The re-circulation of older breaches in combolists is a well-documented phenomenon. Security researchers have observed that threat actors frequently compile and trade these lists for use in credential stuffing attacks. One Telegram post we observed claimed these older lists are "gold mines" because many users haven't changed their passwords since the original breaches.