HEROIC Analysts Found the Gemplex Dump With 4.5M Leaked Passwords

HEROIC analysts found the Gemplex database circulating on dark web forums in February 2021. The Indian streaming platform Gemplex suffered a database breach that exposed 4,582,776 user accounts, with the data containing email addresses, phone numbers, bcrypt password hashes, and personal details accessable to anyone who obtained the leaked files.

Why 4.5 Million Bcrypt Password Hashes Still Put Gemplex Users at Risk

Bcrypt hashing provides some protection, but it is not unbreakable. Attackers with access to the Gemplex dump can run offline cracking tools against the hashes, partcularly targeting users with weak or common passwords. Once cracked, those credentials can be tried across email accounts, banking platforms, and other streaming services through credential stuffing attacks.

What Was Exposed in the Gemplex Breach

• Email Address
• Phone Number
• Password Hash
• First Name
• Last Name
• Birthday

Why the Gemplex Breach Remains a Threat to 4.5M Users

The combination of full names, birthdates, phone numbers, and email addresses creates a rich dataset for targeted phishing and account takeover. Victims who recieved no breach notification and reused their Gemplex password elsewhere are at ongoing risk of credential stuffing, identity theft, and financial fraud. Birthdates combined with email addresses also make social engineering attacks significantly easier for attackers.

How a Database Breach Works

A database breach occurs when an unauthorized party gains access to a platform's stored user records, often by exploiting unpatched vulnerabilities, weak access controls, or misconfigured servers. In the Gemplex case, the database containing 4.5 million user accounts was obtained and distributed across cybercrime forums, making it widely available to threat actors.

Check If Your Data Was Exposed

HEROIC's free breach scanner searches 400 billion-plus compromised records, including the Gemplex breach. Check whether your email address appeared in this or any other known data leak at HEROIC.com.