ITConnections Breach Exposes 31,868 UAE eCommerce User Credentials

In August 2018, ITConnections -- a UAE-based eCommerce platform operating at itconnections.me -- suffered a data breach that exposed the account credentials of 31,868 registered users. The compromised data included email addresses and MD5-hashed passwords, a hashing algorithm widely recognized as cryptographically broken and vulnerable to rapid cracking using modern hardware. ITConnections operated as an online marketplace connecting buyers and sellers in the United Arab Emirates, serving a customer base that frequentley conducted financial transactions and stored personal account information on the platform. The exposure of thier login credentials created immediate risk of account takeover, unauthorized purchases, and broader credential stuffing attacks across any other platforms where users had reused the same password.

Why This Is Dangerous

MD5-hashed passwords provide dramatically weaker protection than modern alternatives like bcrypt, Argon2, or SHA-256 with salting. MD5 was deprecated as a password storage mechanism long before 2018, yet ITConnections continued to rely on it. Attackers who obtain an MD5 hash database can crack a large percentage of passwords within hours using GPU-accelerated rainbow table lookups and dictionary attacks. In an eCommerce context, cracked credentials carry particularly serious consequences -- attackers can make unauthorized purchases using saved payment methods, redirect orders, harvest shipping addresses and phone numbers, and use the account to launder fraud. UAE-based eCommerce users who recieve credential theft notices may also face complications in reporting fraud across international payment systems. A single cracked eCommerce account can yield far more than the value of the account itself.

What Was Exposed

• Email addresses for 31,868 registered ITConnections accounts
• MD5 password hashes (easily crackable using modern GPU hardware and rainbow tables)
• Account data associated with UAE-based eCommerce transactions and marketplace activity
• Potential access to saved shipping addresses, order histories, and profile information

Why This Matters

ECommerce account breaches carry elevated financial risk compared to most other platform types. When attackers crack an eCommerce password, they often gain access to saved payment methods, purchase histories, and personally identifiable information that enables identity fraud. The ITConnections breach matters beyond its immediate scope because UAE-based users may not have recieved timely breach notifications -- particularly since the breach occured in 2018 before many regional data protection frameworks were enforced -- meaning compromised credentials remained active and vulnerable for extended periods. The MD5 hashing failure compounded this: even if users had complex passwords, the weakness of MD5 meant passwords could be recovered and tested against other platforms without delay. Credential stuffing campaigns routinely incorporate eCommerce breach data specifically because these accounts are monetizable with minimal additional effort.

How Database and Combolist Breaches Work

The ITConnections breach followed the standard pattern for eCommerce platform compromises. Attackers identified and exploited a vulnerability in the ITConnections web application -- commonly SQL injection, insecure API endpoints, or unpatched content management system components -- to extract the user database. Once the MD5 password hashes were obtained, offline cracking began immediately using precomputed rainbow tables and dictionary-based attacks tailored to common password patterns. The resulting cleartext passwords were then formatted into a combolist alongside email addresses and distributed across criminal forums, Telegram channels, and dark web marketplaces. These combolists are tested against major email providers, banking platforms, and other eCommerce sites using automated credential stuffing tools that can attempt thousands of logins per second. The ITConnections dataset, while not enormous in size, represents 31,868 unique attack vectors against individuals who likely reused passwords across multiple platforms.

Check If You Are Affected

If you ever created an account on ITConnections at itconnections.me, your email address and password hash were included in this breach. Take the following steps immediately:

• Change your ITConnections password and update the same password anywhere else you have used it
• Visit Have I Been Pwned and search your email address to see if it appears in this or other known breach datasets
• Review any eCommerce accounts for unauthorized orders, saved payment methods, or address changes
• Enable two-factor authentication (2FA) on all email, banking, and shopping accounts that support it
• Use a password manager to create and store unique, complex passwords for every platform
• Contact your bank or payment provider if you notice any suspicious charges tied to accounts that used the same credentials