HEROIC Found Athletics New Brunswick Credentials on a Hacking Forum

In July 2018, HEROIC analysts discovered 10,631 records from Athletics New Brunswick, a Canadian sports portal, listed on a prominent hacking forum. The dataset included email addresses and MD5 hashed passwords. The breach followed a direct database extraction, and the credentials were incorporated into a combolist that continues to appear in credential stuffing campaigns targeting unrelated services.

Why the Athletics New Brunswick Breach Is Dangerous

MD5 hashes offer minimal protection against modern cracking tools. Attackers can reverse common or weak MD5 hashes in seconds using precomputed rainbow tables or GPU-assisted brute force. Once cracked, each recovered email and password pair becomes a weapon in automated attacks against banking platforms, email services, and subscription apps. Sports organization accounts are particularly prone to password reuse, since users often apply the same credentials across club registrations and recreational platforms.

What Was Exposed in the Athletics New Brunswick Leak

• Email addresses
• MD5 password hashes

Why This Athletics New Brunswick Data Puts You at Risk

Even a breach from a regional sports organization can cause significant damage if users recycled their passwords. The 10,631 records from Athletics New Brunswick represent real people whose email and credential combinations may have been tested against hundreds of other sites. Credential stuffing attacks using this data may have continued for years without the affected users knowing their information was ever exposed.

How a Database Combolist Works

The Athletics New Brunswick breach involved direct access to the portal's database, from which user records were extracted in bulk. The data was then formatted into a combolist, pairing email addresses with hashed passwords in a structured file. This type of file is easily imported into automated attack tools and is regularly shared and traded across hacking forums, keeping old breach data in active circulation long after the original incident.

Check If Your Data Was Exposed

HEROIC operates one of the world's largest breach databases, covering more than 400 billion leaked records. Use HEROIC's free breach scanner to check if your email address or credentials appeared in the Athletics New Brunswick leak or thousands of other breaches in our database.