How the HockeyStreams Breach Led to 20,868 Stolen Logins

HEROIC analysts have recorded a database breach affecting HockeyStreams, a sports streaming service operating at hockeystreams.com, dated January 1, 2014. The incident exposed 20,868 records. The passwords in this breach were stored using a mix of plaintext and MD5 hashing, meaning some accounts were exposed with no protection at all while others relied on an outdated, easily crackable format.

Why a Mix of Plaintext and Weak Hashing Is Dangerous

When a site stores some passwords as plain, readable text and others as MD5 hashes, it tells you the platform never had a consistent security standard. The plaintext accounts required zero effort for an attacker to exploit, and the MD5 accounts are not far behind, since modern hardware can crack MD5 hashes quickly and cheaply. In practice, nearly every one of the 20,868 exposed accounts had a usable password within reach of anyone who obtained the database.

What Is Known About the HockeyStreams Breach

• 20,868 records exposed
• Source: hockeystreams.com, a sports streaming service
• Passwords stored as a mix of plaintext and MD5 hashes
• Breach type: database compromise

Why This Matters

A streaming account might feel low-stakes, but the login itself is what matters to an attacker. Once a password is recovered, whether instantly from plaintext or after a quick crack of an MD5 hash, it gets tested against email providers, banking sites, and shopping accounts through automated credential stuffing tools. Anyone who reused their HockeyStreams password elsewhere is at direct risk of account takeover.

How This Type of Database Breach Happens

This incident is classified as a database breach, meaning attackers gained direct access to HockeyStreams' backend systems rather than targeting individual users. A site storing passwords inconsistently, some in plaintext and others hashed, usually points to a system that grew over time without a unified security policy, leaving gaps that attackers can exploit to export the full user table in one operation.

Check If You Are Affected

If you ever had an account with HockeyStreams or a similar streaming service, check your exposure now. HEROIC's free breach scanner searches more than 400 billion breached records to show you instantly what has surfaced under your email address.