The Ipmart-BG Leak: 135,194 Passwords Exposed. Yours Might Be One.

HEROIC analysts identified a breach connected to Ipmart-BG, a phone and technology retailer at ipmart-bg.com, that exposed 135,194 user records. The breach dates back to November 30, 2015, and the exposed data set includes email addresses, usernames, and passwords hashed using vBulletin's hashing method.

Why the Ipmart-BG Breach Is Still Worth Worrying About

vBulletin's password hashing can be broken with modern cracking hardware, particularly at a scale of 135,194 accounts, where attackers only need to succeed against a fraction of the list to make the effort worthwhile. Once cracked, those passwords are tied directly to real email addresses and usernames, giving attackers a ready-made list to test against other services.

What Was Exposed in the Ipmart-BG Breach

• Email addresses
• Usernames
• Passwords (vBulletin hashed)

Why This Matters for Ipmart-BG Customers

If you created an account with Ipmart-BG and reused that password anywhere else, whether on your email, a shopping account, or a banking app, this breach could be the reason that account gets compromised. Attackers routinely feed exposed email and password pairs into automated credential stuffing tools, testing them at scale against popular services until they find a match.

How a Database Breach Like This Happens

A database breach like this one typically begins with attackers exploiting a vulnerability in outdated forum or e-commerce software to gain backend access. Once inside, they export the full user table, including hashed passwords, usernames, and emails, and later post the file on hacking forums or trade it in private channels. Data like this can circulate quietly for years before resurfacing, as happened here nearly a decade after the original breach.

Check If You Are Affected

With 135,194 records involved, this breach is large enough to be a meaningful source for ongoing credential stuffing campaigns. HEROIC's free breach scanner checks your email address against a database of more than 400 billion leaked records, including this one, so you can find out in seconds whether your information was exposed and take action to secure your accounts.