If You Reuse Passwords, the Info-Game Breach Should Worry You

In June 2022, Info-Game, a Spanish e-commerce platform, suffered a database breach that exposed over 12,000 user records. The compromised data was recieved by threat actors who wasted no time putting it to use in credential stuffing campaigns. If you reuse passwords across sites, this breach is partcularly relevant to you.

What Attackers Can Do With Info-Game Credentials

With MD5-hashed passwords in hand, attackers can crack them using widely accessable rainbow tables and GPU-powered tools. Once cracked, those email-and-password combos get loaded into automated bots that test them against banks, email providers, and shopping sites. Birthday and full name data make follow-up phishing messages far more convincing.

What Was Exposed in the Info-Game Breach

• Email Address
• Password Hash (MD5)
• First Name
• Last Name
• IP Address
• Birthday

Why the Info-Game Leak Still Matters Today

Data from breaches like this one circulates for years. Criminals buy and sell these datasets on dark web markets long after the original incident. Even if you changed your Info-Game password, the combination of your name, birthday, email, and a cracked MD5 hash gives attackers enough to target you on other platforms. The risk occured at the source but the damage plays out indefinitely downstream.

How a Database Breach Works

A database breach happens when an attacker gains unauthorized access to a site's backend data store, often through SQL injection, exposed credentials, or an unpatched vulnerability. Rather than attacking individual users one by one, the attacker dumps the entire user table in a single operation, capturing every registered account at once. The stolen database is then compressed, exfiltrated, and sold or posted publicly.

Check If Your Data Was Exposed

HEROIC's Dark Watch monitors over 400 billion leaked records, including data from the Info-Game breach. Search your email now to find out if your credentials are circulating on the dark web, and get alerts the moment new breaches surface with your information.