Our Analysts Found the Just Born Database Dump on a Dark Web Marketplace

HEROIC analysts flagged a suspicious data dump on a dark web marketplace in early October 2023. The dataset belonged to Just Born, an Indian e-commerce platform selling baby care products for newborns and infants. The breach exposed 1,011 user records and included a mix of personal identifiers and password data. What made this incident partcularly concerning was not the scale, but the type of data involved: real names, phone numbers, email addresses, and weakly protected password hashes were all bundled together in a single leak.

What Attackers Can Do With Your Just Born Account Data

When criminals get their hands on a combination of your email address, phone number, full name, and a password hash, they have nearly everything they need to cause real damage. MD5 password hashes, the type used here, are widely considered broken. Attackers run these hashes through precomputed lookup tables called rainbow tables and can recover the original password in seconds for most common choices. Once they have your password, they will try it on your email inbox, your bank, your social media, and anywhere else you might have recieved a login link. Your phone number adds another layer of risk, making it easy to target you with convincing SMS scams or SIM swap attacks.

What Was Exposed in the Just Born Breach

• Email Address
• Phone Number
• First Name
• Last Name
• IP Address
• Password Hash (MD5)

Why the Just Born Leak Is a Bigger Problem Than It Looks

A breach of just over a thousand records might seem minor compared to massive corporate leaks affecting millions of people. But size is not the only thing that matters. This data is highly actionable. Criminals combine small, targeted datasets like this one with records from other breaches to build detailed profiles on individuals. If your email address and an old password appear here, and you have used that password anywhere else, every one of those accounts is now at risk. The inclusion of IP addresses also gives attackers a rough idea of your physical location, which can be used to craft more beleivable phishing messages tailored to your region.

How a Database Breach Works

A database breach happens when an attacker gains unauthorized access to the backend database of a website or application. This can occur through several methods: SQL injection attacks, where malicious code is inserted into a site's search or login fields; compromised admin credentials bought from other breaches; or unpatched software vulnerabilities that leave a back door open. Once inside, the attacker exports the entire customer table, sometimes in a matter of minutes. The stolen data is then sold or posted on dark web forums. Database breaches are among the most common breach types because many websites, especially smaller e-commerce platforms, do not invest sufficiently in database security or timely software updates.

Check If Your Data Was Exposed

If you have ever shopped on Just Born or used a similar email and password combination on other sites, your credentials could be accessable to attackers right now. HEROIC's free breach scanner checks your email address against a database of over 400 billion leaked records, including this breach and thousands of others. It takes seconds and requires no account. Head to the HEROIC breach scanner to find out exactly what information about you has been exposed and what steps you should take next.