The isellstructuredsettlement Breach Exposed 8,811 Passwords

HEROIC analysts identified a dataset from isellstructuredsettlement, a US service that helps people sell future structured settlement payments for a lump sum, that was breached on August 26, 2018. The incident exposed 8,811 records containing email addresses and plaintext passwords, later posted on a hacking forum.

Why the isellstructuredsettlement Breach Is Dangerous

Because these passwords were never encrypted or hashed, anyone who downloads the file can read them immediately, no cracking required. Each of the 8,811 exposed accounts comes with a working password paired directly with its email address. Given that this service handles large financial payouts, an attacker with a working login could attempt to intercept or redirect a settlement payment.

What Was Exposed

• Email addresses
• Plaintext passwords

Why This Matters

Plaintext email and password pairs are exactly what attackers need for credential stuffing, testing the same login across banking sites, email providers, and other financial accounts. Because this breach involves a service tied to large cash payouts, anyone whose credentials appear here faces an elevated risk of account takeover, financial fraud, and identity theft beyond what a typical breach would carry.

How Database and Combolist Breaches Like This Happen

This breach traces back to a direct compromise of isellstructuredsettlement's database, most likely through a vulnerability in the platform's website or login system. Once attackers copied the table of emails and passwords, they packaged the data into a combolist, a compiled file built for easy reuse and resale on hacking forums. Combolists like this one continue to circulate for years after the original breach, which is why 2018 data is still worth checking today.

Check If You Are Affected

HEROIC's free breach scanner checks your email address against a database of more than 400 billion leaked records, including this isellstructuredsettlement breach. Run a scan now, and change any password you may still be reusing from 2018.