9,168 Goldmark Accounts Breached: Passwords and Birthdays Now in Hacker Hands

In February 2023, Goldmark, a Polish e-commerce platform selling gold and silver jewelry, experienced a database breach that exposed 9,168 customer records. The leaked data included email addresses, password hashes, first names, last names, and birthdays, leaving affected users at risk of credential theft and identity fraud. The beleive combination of passwords and personal details makes this breach a particularly serious threat to account security.

Why Exposed Passwords and Birthdays Put You at Risk

Password hashes from the Goldmark breach were stored using both MD5 and bcrypt algorithms. MD5 hashes are especially weak and can be reversed quickly using widely available cracking tools, particularly when the attacker also has the account holder's birthday as a potential password hint. Anyone whose Goldmark account used a weak or birthday-based password should treat their credentials as fully occured compromised.

What Was Exposed in the Goldmark Breach

• Email Address
• Password Hash
• First Name
• Last Name
• Birthday

Why the Goldmark Breach Still Matters Today

Stolen credentials and personal details have a long shelf life on the dark web. The 9,168 records from Goldmark may still be available to cybercriminals who can use the data for account takeover attempts or targeted phishing. If you reused your Goldmark password on any other platform, those accounts remain at risk until the password is changed.

How Database Breaches Work

In a database breach, an attacker bypasses access controls and retrieves data directly from a company's backend storage system. Attackers typically exploit vulnerabilities in web applications, steal database credentials, or take advantage of insecure configurations. The resulting data dump is then sorted, packaged, and distributed through underground markets.

Check If Your Data Was Exposed

HEROIC's free breach search tool scans more than 400 billion exposed records, including data from the Goldmark breach. Check your email address today to find out if your personal information or password hash is part of any known breach, and get actionable guidance on securing your digital identity.