Lithuania’s Hostinger Breach Exposed 998,676 Plaintext Passwords

HEROIC analysts identified a late 2015 data breach tied to Hostinger, the Lithuania-based web hosting provider, that exposed 998,676 accounts. The compromised records include email addresses, usernames, IP addresses, and passwords stored in plaintext, meaning no protection was applied to them at all.

Why This Is Dangerous

Plaintext passwords are the worst case scenario in any data breach. There is no hash for an attacker to crack and no encryption to work around. Anyone who obtains this data can read the exact password a Hostinger customer used and try it immediately on other accounts tied to the same email address.

What Was Exposed

• Email addresses
• Usernames
• IP addresses
• Passwords (stored in plaintext)

Why This Matters

Hosting accounts often control websites, domain settings, and sometimes billing information, which makes this breach especially valuable to attackers. If a Hostinger customer reused their password anywhere else, from email to banking to other business tools, that account can be accessed immediately, with no cracking required. Nearly a million accounts exposed with instantly usable passwords represents a significant amount of risk from a single breach.

How This Database Breach Happened

This incident is classified as a database breach, meaning attackers gained direct access to Hostinger's user database rather than collecting credentials one at a time. Hosting platforms are attractive targets for attackers because a single successful breach can expose the accounts of a large customer base at once. Once inside, an attacker can copy the entire user table in one move, which is how a single incident exposed nearly a million accounts.

Check If You Are Affected

If you had a Hostinger account around 2015, it is worth checking whether your information is part of this exposure. HEROIC's free breach scanner checks a database of more than 400 billion leaked records, so you can see instantly if your email address turns up and change any passwords you may still be reusing.