Identity Theft Risk Grows After Grow & Behold Breach: 7,755 Exposed

Grow & Behold Data Breach: What HEROIC Analysts Found

HEROIC analysts identified a data breach tied to Grow & Behold, a US-based ecommerce platform specializing in pasture-raised kosher meats, dated August 26, 2018. The breach exposed 7,755 unique records containing email addresses and plaintext passwords. The data was later posted on a prominent hacking forum, where it remains available to anyone looking for working login credentials.

Why This Is Dangerous

Because these passwords were stored and exposed in plaintext, there is no encryption to break before an attacker can use them. Anyone who downloads this dataset can immediately try logging into the associated email accounts, and into any other service where the same password might have been reused. For customers who shopped at Grow & Behold, that means a password created years ago for a meat delivery order could still expose an email account or financial login today.

What Was Exposed in the Grow & Behold Breach

• Email addresses
• Plaintext passwords

Why This Matters for Grow & Behold Customers

Old breaches like this one do not lose their value over time. Plaintext credential dumps continue to circulate on hacking forums for years, getting folded into larger credential stuffing campaigns aimed at email providers, banks, and retail sites. If a Grow & Behold password was reused anywhere else, that account is now at risk of takeover, and the data it holds could be used for identity theft or financial fraud.

How Combolist and Database Breaches Like This Work

This breach follows a familiar pattern for smaller ecommerce platforms. Attackers gain direct access to the site's customer database, often through an unpatched vulnerability, and copy the stored records in bulk. Because the passwords were saved in plaintext rather than hashed, the stolen data required no extra cracking step before being packaged into a combolist, a simple list of email and password pairs built specifically for automated login attempts across other websites.

Check If You Are Affected by the Grow & Behold Breach

If you ever placed an order with Grow & Behold, or if you tend to reuse passwords across sites, it is worth checking whether your email address appears in this breach. HEROIC's free breach scanner searches a database of more than 400 billion leaked records so you can see your exposure and update any passwords still in use elsewhere.