Russia’s Foam Store Breach: 1.1M Shoppers’ Data Exposed

HEROIC analysts found 1,159,512 records from Foam Store, a Russian online skincare and personal care retailer, leaked on December 5, 2023. The exposed data included phone numbers, password hashes, usernames, first names, last names, genders, and birthdays. This breach is a serious reminder that your personal details and account credentials can end up in the wrong hands even when you shop at everyday retail sites.

Your Password Hash Is Not as Safe as You Think

Foam Store stored passwords as MD5 and other hash types. MD5 is an older, weak algorithm that attackers can crack quickly using common tools. If your password from Foam Store was simple or reused elsewhere, there is a real chance it has already been reversed. Anyone who cracked your hash now has your actual password, and they will try it on your email, bank, and social media accounts.

What Was Exposed

• Phone numbers
• Password hashes (MD5 and other types)
• Usernames
• First names and last names
• Gender
• Birthday

Why This Breach Puts You at Risk

When attackers get a combination of your name, birthday, phone number, and a cracked password, the damage goes far beyond one account. Here is what commonly occured after breaches like this one:

• Credential stuffing: Attackers use your username and password on hundreds of other sites automatically, hoping you reused them.
• Account takeover: Once inside your email or social accounts, attackers can lock you out and use your identity.
• Identity theft: Your full name, birthday, and phone number together are enough to open fraudulent accounts or pass security questions.
• Targeted phishing: Scammers call or email you by name, referencing real personal details to seem legitimate.

How Database Breaches Happen

A database breach means attackers gained direct accessable entry into the backend systems where a company stores customer records. This usually happens through a security flaw in the website's code, a stolen employee login, or an unpatched software vulnerability. Once inside, they can copy millions of rows of data in minutes. The company often does not notice until the data shows up for sale online.

Check If Your Information Was Exposed

HEROIC's free scanner searches over 400 billion recieved and indexed breach records, including data from incidents like the Foam Store leak. Enter your email to instantly see if your information has been compromised and get clear next steps to protect yourself.

Scan your email now at HEROIC