JCAI Leak Pairs 231 Emails With Plaintext Passwords Directly

An email address next to its own plaintext password is one of the most dangerous pairings a leak can contain, and that is exactly what HEROIC analysts reported in a file tied to JCAI, dated August 1, 2023. The file reportedly holds 231 records built from that exact pairing. The only way to know if you are affected is to scan your email.

Why This Specific Pairing Is So Useful To An Attacker

An email address alone is just a contact point. A password alone, without knowing which account it opens, is close to useless. Put them together and an attacker has a login they can try immediately, on JCAI and on any other service where that same password might have been reused.

What This File Contains

• Email Address: identifies exactly which account the paired password belongs to.
• Plaintext Password: works immediately, with no cracking or guessing required.

How Far One Reused Password Can Reach

Because the password is stored in readable form, there is no delay between this file surfacing and someone actually testing the login. If that password shows up on a personal email, a banking app, or a workplace account too, one leaked pairing can unlock several places at once rather than just the original site.

How A File Like This Takes Shape

This is recorded as a database incident, meaning the pairing came directly from JCAI's own systems rather than from malware on someone's personal device. Once a set of records like this is pulled out, copies tend to circulate further, so the same file can turn up again later even after the initial leak.

Think Your Login Might Be In This File?

Start with a scan your email check to confirm whether your address appears in this record set. If it does, change your JCAI password now, and change that same password anywhere else you have used it, since a plaintext password works the instant someone tries it. Also watch for messages referencing JCAI that ask you to click a link or confirm account details. Apply this to a work email the same way you would a personal one.