I Love King’s Point

We noticed a significant exposure event impacting users of the "I Love King's Point" real estate platform, discovered on August 21, 2018. What struck us immediately was the sheer accessibility of the compromised credentials, suggesting a direct database dump rather than a sophisticated infiltration. The dataset, comprising nearly 9,000 records, featured a concerning combination of email addresses and, critically, plaintext passwords. This immediately flags it as a high-priority incident due to the inherent risks associated with such easily exploitable authentication data.

The breach, originating from a database compromise on the "I Love King's Point" platform, resulted in the exfiltration of 8,903 unique user records. The exposed data primarily consisted of email addresses and their corresponding plaintext passwords. This type of exposure is particularly problematic as it directly facilitates credential stuffing attacks, where attackers leverage these stolen credentials to attempt unauthorized access to other online services. The data was subsequently found disseminated on a well-known cybercrime forum, indicating a likely sale or free distribution to malicious actors. The source structure points to a direct database dump, bypassing typical security layers and presenting a clear vector for immediate exploitation.

At the time of the leak in August 2018, there was no widespread public reporting of this specific breach. However, the nature of the exposed data—specifically plaintext passwords—aligns with a recurring theme in cybersecurity incidents where databases are inadequately secured or are targeted for their direct access to user credentials. Such breaches often contribute to larger combolists, which are then used in widespread automated attacks against various online platforms. Further OSINT analysis would focus on tracking the dissemination of this specific dataset and its subsequent use in other reported compromise events.