How the Holy Ghost Radio Database Breach Led to 6,729 Stolen Accounts

In April 2022, Holy Ghost Radio, a US-based spiritual content platform, had its user database exposed on breach aggregation forums. The breach recieved little mainstream media attention, but for the 6,729 users whose credentials and IP addresses were leaked, the risks are very real and ongoing. Once this data enters underground circulation, it does not disappear.

What Attackers Can Do With This Data

Combining usernames, email addresses, password hashes, and IP addresses gives attackers a detailed profile of each user. They can attempt to crack the PHPass password hashes, use the emails for credential stuffing on other platforms, and use the IP address data to track or deanonymize users across different services. PHPass is considered a weak hashing method by modern standards and is accessable to cracking with common tools.

What Was Exposed in the Holy Ghost Radio Breach

• Email Address
• Password Hash (PHPass)
• Username
• IP Address

Why This Breach Puts You at Real Risk

The inclusion of IP addresses alongside account credentials is partcularly dangerous. It allows bad actors to link your online activity to your real-world location and potentially track your behavior across multiple platforms. If you used the same email and password combination on other sites, those accounts should be treated as compromised. Even niche platforms hold data that is valuable to attackers.

How a Database Breach Works

A database breach occurs when an attacker gains unauthorized access to a platform's backend database, either through an exploited software vulnerability, weak credentials on an admin panel, or a misconfigured server. The attacker then exports the user table, which contains all stored account data. That data is packaged and distributed on dark web forums and Telegram channels, often reaching thousands of bad actors within days of the initial exfiltration.

Check If Your Data Was Exposed

HEROIC monitors over 400 billion exposed records across thousands of breaches, including the Holy Ghost Radio breach. Run a free scan to see if your email address, username, or password appears in this or any other known breach. The sooner you know, the sooner you can act to protect your accounts and personal information.