405 Flirtim accounts breached: passwords and emails in hacker hands

In March 2023, Flirtim, an Israeli online dating platform, experienced a database breach that exposed 405 user accounts. The leaked records contained email addresses, bcrypt password hashes, usernames, first names, last names, and birthdays, making this one of the more sensitive data exposures for a platform of its size. Dating site breaches are partcularly serious because the personal nature of the data creates heightened risks for affected individuals.

Why Exposed Passwords and Personal Details Put You at Risk

Even though the passwords in this breach were hashed using bcrypt, weak or commonly used passwords can still be cracked through offline brute-force attacks. When cracked passwords are combined with full names, birthdays, and email addresses, attackers have enough information to access other accounts and conduct highly targeted fraud. The intimate context of a dating platform also makes victims more susceptible to beleive blackmail or extortion attempts.

What Was Exposed in the Flirtim Breach

• Email Address
• Password Hash
• Username
• First Name
• Last Name
• Birthday

Why the Flirtim Breach Still Matters Today

Data from dating platform breaches is especially long-lived because the personal details remain accurate and useful to attackers for years. The 405 records exposed in the Flirtim breach include birthdates and password hashes that can still be exploited if the affected users have not changed their passwords and email credentials. Anyone involved in this breach should treat all associated accounts as compromised.

How Database Breaches Work

A database breach occurs when an attacker gains unauthorized access to a platform's data storage, typically by exploiting software vulnerabilities, insecure API endpoints, or stolen administrative credentials. In this case, the attacker extracted user records including hashed passwords and personal identifiers. Although bcrypt hashing adds a layer of protection, it does not prevent cracking if the underlying passwords are weak.

Check If Your Data Was Exposed

HEROIC's breach search platform indexes over 400 billion records from thousands of confirmed incidents, including breaches from dating platforms like Flirtim. Enter your email address at HEROIC now to find out if your personal information or password hash is part of a known leak and get guidance on securing your accounts immediately.