FreshFiction

We've been tracking the resurgence of older data breaches appearing on newer platforms, often re-packaged or combined with fresh data to create a sense of novelty. What initially appeared to be a small, isolated password dump led us to uncover a 2015 breach from the website FreshFiction, a site dedicated to book reviews and author information. The relatively small size – 5,467 records – didn't initially raise alarms. However, the clarity of the data, the presence of older password hashes, and the potential for password reuse made this a worthwhile investigation.

FreshFiction Breach: 5.4k Accounts Resurface After Nearly a Decade

The FreshFiction breach, dating back to May 3, 2015, involved the exposure of 5,467 user records. While the total number of accounts is modest compared to mega-breaches, the longevity of the exposed data and its reappearance on modern breach aggregation sites present a risk. The data includes email addresses and passwords, with the password hashes presenting a particular concern. The breach was identified after the data was posted to a popular credential stuffing forum. What caught our attention was the age of the breach combined with the cleartext usernames and email addresses available.

Breach Stats:

• Total records exposed: 5,467
• Types of data included: Email Addresses, Passwords
• Sensitive content types: User Credentials
• Source structure: Database Dump
• Leak location(s): Credential Stuffing Forums, Dark Web Marketplaces

The re-emergence of older breaches highlights the persistent risks associated with password reuse and the long tail of data exposure. Even breaches from nearly a decade ago can still be leveraged for credential stuffing attacks, especially against individuals who may have used the same password across multiple platforms.

External Context & Supporting Evidence

While the FreshFiction breach itself didn't garner widespread media attention in 2015, the broader trend of older breaches resurfacing is well-documented. Security researcher Troy Hunt's Have I Been Pwned (HIBP) has tracked numerous similar incidents, emphasizing the need for proactive password management and breach monitoring. The original breach was added to HIBP in 2015 and can be found here: HIBP FreshFiction Breach. This event underscores the importance of continuous monitoring for exposed credentials, even from seemingly minor or outdated breaches.