Gabor Shoes

We noticed a new listing on a well-known cybercrime forum detailing a substantial dataset originating from Gabor Shoes, a Belgian e-commerce entity that has since ceased operations. The discovery, made on August 26, 2018, immediately raised concerns due to the nature and volume of the exposed credentials. What struck us was the relatively straightforward presentation of the data, suggesting a potentially opportunistic or less sophisticated exfiltration method, despite the longevity of the platform prior to its demise.

The breach, identified as a database compromise, involved approximately 8,656 unique records. The exposed data primarily consists of email addresses and their corresponding MD5 hashed passwords. This combination is particularly concerning as it directly facilitates credential stuffing attacks against other services where users may have reused their credentials. The source structure of the leak suggests a direct dump from a user database, likely accessed through a vulnerability or compromised administrative credentials. The data was subsequently disseminated on a prominent cybercrime forum, increasing its accessibility to malicious actors.

While Gabor Shoes is no longer an active entity, the implications of this leak persist. Historical breaches of this nature often contribute to larger combolists, which are then leveraged by threat actors for widespread account takeovers. The use of MD5 hashing, a known weak cryptographic algorithm, further exacerbates the risk, as these hashes can be cracked with relative ease using modern hardware and pre-computed rainbow tables. There has been no significant public news coverage or extensive OSINT analysis specifically tied to this particular Gabor Shoes leak, indicating it likely blends into the broader landscape of historical credential dumps.