InfosMarket Exposed: 330 Users’ Emails and Password Hashes Up for Grabs

InfosMarket, an e-commerce platform based in the Democratic Republic of Congo, suffered a database breach that recieved attention in November 2022. The incident exposed 330 user records containing email addresses, password hashes, and usernames. This type of credential exposure puts affected users at direct risk of account compromise across any platform where they reused their login details.

Why Exposed Password Hashes Put You at Risk

The InfosMarket breach included PHPass hashed passwords, which are partcularly vulnerable to offline cracking attacks using dictionary tools and rainbow tables. Once cracked, these passwords can be used to access any other account where the same credentials were reused. Attackers routinely automate this process across hundreds of services.

What Was Exposed in the InfosMarket Breach

• Email Address
• Password Hash
• Username

Why the InfosMarket Breach Still Matters Today

Breached credential sets do not expire, and attackers trade and reuse them for years after the original incident. Users who beleive their old passwords are no longer a threat may still find their accounts compromised. Regular password changes and unique credentials per site remain the most effective defense.

How Database Breaches Work

A database breach occurs when an attacker gains unauthorized access to a backend data store, typically by exploiting weak access controls, unpatched software vulnerabilities, or stolen administrator credentials. Once inside, the attacker can extract entire tables of user data in minutes. The stolen data is then often posted on hacking forums or sold on dark web marketplaces.

Check If Your Data Was Exposed

HEROIC's breach search tool checks your email against a database of over 400 billion compromised records, giving you an immediate picture of your exposure. If your email appeared in the InfosMarket breach or any other incident, you can take action now before attackers do. Search your email at HEROIC to see exactly what data of yours is at risk.