The GladMinds Breach Happened in 2020. The Data Is Still Out There.

HEROIC analysts surfaced the GladMinds breach during routine monitoring of data forums where compromised datasets from Indian technology platforms are traded. The breach, which occured in July 2020, exposed 5,661 records from an Indian SaaS platform. While smaller in scale than many breaches we track, the exposure of bcrypt password hashes alongside usernames and email addresses from a business-facing software platform creates a real risk of unauthorized access to enterprise accounts. The data has been circulating since the initial leak date but continues to pose a threat to anyone who has reused those credentials.

Business Account Credentials and Email Addresses Exposed to Credential Stuffing

When business platform credentials are leaked, the consequences extend beyond individual users. Attackers can use the exposed GladMinds usernames and email addresses to attempt access to connected business systems, client data, and internal tools. Even though bcrypt is a strong hashing algorithm, it is not unbreakable, and weak or common passwords in the dataset may be cracked over time. Seperate from the password risk, the usernames and email addresses alone enable targeted spear-phishing against professionals at Indian technology companies.

What Was Exposed in the GladMinds Breach

• Email Address
• Password Hash (bcrypt)
• Username

Why a 5,661-Record Breach at an Indian SaaS Platform Still Matters

The GladMinds breach may recieved less attention than larger incidents, but the business context makes it partcularly significant. Users of SaaS platforms in the IT services sector typically hold access to sensitive client data, project files, and business communications. A single compromised account at a SaaS platform can be a lateral movement opportunity for attackers seeking access to downstream clients and partners. This is why even a smaller breach of business-facing software warrants serious attention.

How Database Breaches Work

A database breach happens when an attacker gains unauthorized access to a platform's stored user records, typically through exploitation of web application flaws, insecure APIs, or compromised admin credentials. Once access is obtained, the attacker exports the database and distributes or sells it. In the case of GladMinds, the exposed records included the credentials needed to authenticate to the platform, creating direct account takeover risk.

Check If Your Data Was Exposed

HEROIC's free breach scanner checks your email against more than 400 billion records from known data leaks, including the GladMinds breach. Run a free scan at HEROIC to find out if your credentials are circulating in the wild.