Home Tuition Care

We noticed a significant data leak originating from Home Tuition Care, a Singaporean tutoring-matchmaking platform, surfaced on a prominent hacking forum in August 2018. The dataset contained a substantial number of user credentials, raising immediate concerns about account compromise and potential downstream impacts. What struck us was the exposure of plaintext passwords, a critical vulnerability that bypasses standard hashing protections and directly exposes user authentication details.

The breach, affecting 37,207 users, involved a database dump that was subsequently disseminated. The exposed data primarily consisted of email addresses and, critically, plaintext passwords. This direct exposure of credentials means that any user reusing these passwords across other services is at immediate risk of credential stuffing attacks. The source structure appears to be a direct database export, suggesting a straightforward compromise of the platform's data storage. The leak locations were identified on well-known cybercrime forums, indicating a deliberate effort to monetize or distribute the compromised information.

While no major news outlets extensively covered this specific incident at the time, such leaks often contribute to larger credential stuffing campaigns that are regularly reported. The presence of plaintext passwords is a recurring theme in many breaches, highlighting persistent security misconfigurations and a lack of robust password management practices within organizations. This incident is consistent with a broader trend of accessible user data being exploited for malicious purposes.