Fishing Evolution

We noticed a recent resurgence of interest in a data leak originating from the Italian e-commerce platform, Fishing Evolution, first reported in August 2018. The initial discovery involved the identification of a substantial dataset posted on a prominent hacking forum, containing credentials that appeared to be directly linked to the platform's user base. What struck us as particularly concerning, even years later, is the continued availability and potential exploitation of plaintext passwords within this dataset, a vulnerability that should have been mitigated immediately upon its initial exposure.

The Fishing Evolution breach, occurring on or around August 21, 2018, exposed approximately 20,217 records. The compromised data primarily consisted of email addresses and, critically, plaintext passwords. This indicates a direct database compromise rather than a more sophisticated attack vector. The nature of the exposed data suggests this was likely a database dump, potentially exfiltrated through SQL injection or similar vulnerabilities, and subsequently compiled into a combolist for distribution. The fact that these credentials were leaked in plaintext significantly amplifies the risk, as they are readily usable for credential stuffing attacks against other services where users may have reused their passwords.

While this specific breach did not garner widespread mainstream news coverage at the time, its inclusion in the PwnedList database signifies its recognized impact within the cybersecurity community. OSINT investigations at the time confirmed the data's origin and its subsequent distribution on forums frequented by malicious actors. The continued presence of such plaintext password dumps serves as a stark reminder of the persistent threat posed by legacy vulnerabilities and the importance of robust password hashing and salting practices, even for seemingly smaller or regional online platforms.