Your Password May Be Exposed: The Hemmakvall Breach Hit 40,468 People

Your Password May Be Exposed: The Hemmakvall Breach Hit 40,468 People

HEROIC analysts have identified a data breach affecting Hemmakvall, a Swedish entertainment retailer, that exposed 40,468 records. The breach dates back to July 2015 and the compromised data includes first names, last names, email addresses, and password hashes stored in the MD5 format.

Why Your Full Name Makes This Breach More Personal

Unlike breaches limited to a username and password, this one includes real first and last names alongside email addresses. That combination makes phishing emails far more convincing, since a message that addresses you by name and references a service you actually used is much harder to spot as a scam than a generic email.

What Was Exposed

• First names
• Last names
• Email addresses
• Password hashes (MD5 format)

Why This Matters

MD5 is an outdated hashing algorithm that modern hardware can crack quickly, especially for passwords that are short or commonly used. Once an attacker recovers a working password, they will try it against other accounts through credential stuffing. Combined with your real name and email, that same data can also support convincing identity theft attempts and targeted scams.

How a Database Breach Like This Happens

This incident is classified as a database breach, meaning attackers gained direct access to Hemmakvall's customer database rather than intercepting information one purchase at a time. This typically results from unpatched software or weak server security, letting an attacker extract full customer records, including names, emails, and password hashes, in a single action.

Check If You Are Affected

If you ever created an account with Hemmakvall, it is worth checking your exposure now. HEROIC's free breach scanner checks your email against more than 400 billion breached records, including this one, so you can find out and update any passwords you may have reused elsewhere.