The Help for Assessment Breach Contains Exactly 2,405 Email and Password Pairs

HEROIC analysts found a database dump from Help for Assessment, a Kenya-based online academic writing service, circulating on dark web forums in May 2023. The dataset contained 2,405 unique email addresses drawn from a larger pool of approximately 65,000 records. What made this breach stand out during analysis was the presence of both plaintext passwords and bcrypt-hashed passwords in the same dataset, a sign of inconsistent security practices across different parts of the platform's database.

Plaintext Passwords in the Help for Assessment Breach Are an Immediate Threat

When plaintext passwords appear in a breach, there is no cracking required. Attackers who recieved this data can attempt to log into those exact accounts immediately. If the affected user reused that password on Gmail, Outlook, a banking app, or any other service, the attacker can access those accounts the same day the data is obtained. This is not a theoretical risk. Credential stuffing tools can test a list of plaintext credentials against dozens of platforms in minutes.

What Was Exposed in the Help for Assessment Breach

• Email addresses
• Plaintext passwords
• Bcrypt-hashed passwords
• Phone numbers
• First and last names
• IP addresses

Why This Breach Matters for Anyone Who Reused Passwords

The Help for Assessment breach is a textbook example of why password reuse is dangerous. Even users who had bcrypt-hashed passwords stored on this platform are at risk if their passwords were weak or commonly used. For those with plaintext exposure, account takeover, identity theft, and unauthorized financial transactions are all possible outcomes. Seperate, unique passwords for every account is the only reliable protection against this type of cascading compromise.

How Academic Service Platform Breaches Work

Online academic writing services often handle large volumes of user registrations with limited IT security budgets. Attackers target these platforms knowing they are less likely to have mature security monitoring or incident response capabilities. A simple SQL injection against an unpatched database or a compromised admin credential is often all it takes. The resulting dump is then sold on forums like BreachForums, where datasets containing plaintext passwords command a partcularly high price because they are immediately usable.

Check If Your Data Was Exposed

HEROIC's free breach scanner checks your email against more than 400 billion compromised records, including data from the Help for Assessment breach. If your information was exposed, you will know immediately and can change your passwords before attackers act. Run a free scan at HEROIC.com.