Search Your Email: The Gift-Supplier Dump Exposed 163 Accounts

In June 2022, Gift-Supplier, a Chinese e-commerce platform for corporate gifting, suffered a database breach that exposed user records including hashed passwords, phone numbers, and personal details. The data was recieved by underground markets and has been circulating since. If you had an account on Gift-Supplier, your information may already be in the hands of threat actors.

What Attackers Can Do With Gift-Supplier Account Data

Even bcrypt-hashed passwords are vulnerable if your original password was weak or commonly used. Attackers with your email, phone number, full name, birthday, and gender have everything needed to craft highly personalized phishing messages. That combination of data is partcularly useful for bypassing security questions and social engineering support teams at other platforms.

What Was Exposed in the Gift-Supplier Breach

• Email Address
• Phone Number
• Password Hash (bcrypt)
• First Name
• Last Name
• IP Address
• Gender
• Birthday

Why the Gift-Supplier Leak Is a Long-Term Threat

Leaked personal profiles like these get bundled into combo lists that criminals use for years. Your phone number combined with your birthday and email makes you a prime target for SIM-swapping attacks, where fraudsters convince your carrier to transfer your number to a device they control. This type of account takeover occured with increasing frequency after datasets from breaches like this one hit the open market.

How a Database Breach Works

A database breach involves unauthorized access to a platform's stored user data, typically by exploiting a vulnerability in the application or its backend infrastructure. Once inside, the attacker exports user tables containing account details, hashed credentials, and personal identifiers. The stolen data is then packaged and distributed through dark web forums, private Telegram channels, or sold directly to other criminal groups.

Check If Your Data Was Exposed

HEROIC's Dark Watch scans over 400 billion leaked records, including data from the Gift-Supplier breach. Enter your email to find out if your account details are circulating online, and set up real-time alerts so you know the moment your information appears in a new breach.