Hartley Harvest

We noticed an interesting dataset surfacing on a well-known cybercrime forum on August 26, 2018, originating from an Australian e-commerce entity, Hartley Harvest. What struck us was the simplicity of the exposed credentials, particularly the presence of plaintext passwords, a recurring vulnerability that continues to plague organizations despite its well-documented risks. The dataset, comprising 7,683 unique records, primarily contained email addresses alongside these easily decipherable passwords, suggesting a direct database compromise rather than a sophisticated credential stuffing attack. The immediate public dissemination on a prominent forum indicates a clear intent for monetization or widespread credential reuse exploitation.

The breach of Hartley Harvest, an online platform catering to fresh produce sales, appears to stem from a direct database compromise. The exposed information includes 7,683 email addresses and their corresponding plaintext passwords. The presence of plaintext passwords is a critical security flaw, significantly increasing the risk of account takeover and subsequent lateral movement within any interconnected systems. The data was found aggregated on a cybercrime forum, suggesting it was either directly exfiltrated by threat actors or compiled from a previous breach and repurposed. The source structure points towards a direct dump of user credentials, likely from a backend database that lacked adequate encryption for sensitive authentication data.

While this specific incident did not garner widespread mainstream news coverage at the time, it aligns with a broader trend observed in 2018 and continuing today, where e-commerce platforms remain attractive targets for credential harvesting. The practice of storing passwords in plaintext, as evidenced here, is a known vulnerability that threat intelligence reports from various cybersecurity firms have consistently highlighted as a primary vector for account compromise. The availability of such easily exploitable data on cybercrime forums fuels the creation of combolists, which are then used in automated attacks against other online services, compounding the impact of the initial breach.