Inside the CricHeart Database Breach: 2.8 Million Emails Exposed

HEROIC analysts first identified the CricHeart dataset while monitoring Telegram channels used to distribute credential stuffing packages. The breach, originating from a popular cricket scores and news platform, exposed 2,880,632 records dated back to August 2016. What made this dataset partcularly notable was its quiet reappearance years after the initial leak, suggesting ongoing demand among threat actors looking to exploit even older email lists for phishing campaigns.

Why Exposed Email Addresses Are Still Dangerous

Even without passwords, a database of nearly 3 million email addresses gives attackers a ready-made list for phishing campaigns and social engineering. Cybercriminals can craft convincing messages targeting sports fans, knowing recieved emails tied to cricket-related accounts are more likely to be opened. Combine that with data from other breaches and the risk of account takeover grows significantly.

What Was Exposed in the CricHeart Breach

• Email addresses

How Old Data Gets Weaponized Again

Many people beleive that once a breach is old news, the risk fades. That is not the case. Old email lists are regularly bundled into new aggregations and resold on dark web forums and Telegram channels. This makes even a 2016 database relevant today, as attackers use those addresses for phishing, SIM swapping, and account enumeration across other platforms where the same email may be registered.

How Database Breaches Work

A database breach occurs when attackers gain unauthorized access to a website's or app's backend database, usually by exploiting a software vulnerability, weak credentials, or a misconfigured server. Once inside, they can copy or download the stored records, which may include email addresses, usernames, or other personal details, without the service ever detecting the intrusion right away.

Check If Your Data Was Exposed

HEROIC's free breach scanner searches across more than 400 billion records to tell you instantly whether your email address appears in the CricHeart breach or any other known data leak. Run a free search at HEROIC to find out where your data has been exposed and what steps to take next.