The FileIce Breach Quietly Resurfaced With 5,002 Password Hashes

HEROIC analysts identified a 2015 breach of FileIce, a now-defunct file-sharing service, that exposed 5,002 accounts. The leaked data includes email addresses, usernames, IP addresses, and passwords hashed using the MD5 (phpBB3) format.

Why the FileIce Leak Is Dangerous

The MD5 (phpBB3) hashing format used here offers weak protection against modern cracking tools. Given how long this data has been circulating, it is likely that a significant share of these passwords have already been cracked and are being used in real attacks.

What Was Exposed in the FileIce Breach

• Email addresses
• Usernames
• IP addresses
• Password hashes (MD5 phpBB3)

Why This Matters

Even though FileIce itself no longer exists, the passwords tied to these accounts can still cause damage if they were reused elsewhere. Cracked credentials from breaches like this one are commonly tested against email providers and other services through credential stuffing, and the exposed IP addresses add extra detail attackers can use to track down a person's other accounts.

How This Database Breach Happened

This incident is classified as a database breach, meaning attackers copied user records directly out of FileIce's systems. Small breaches like this often circulate quietly for years before resurfacing in credential collections traded on forums and messaging channels, exactly what happened here.

Check If You Are Affected

If you ever used FileIce to share files, it is worth checking whether your account was exposed. HEROIC's free breach scanner searches over 400 billion leaked records, including this breach, so you know exactly where you stand.