JustJagsUK

On August 21, 2018, a significant data breach impacting the UK-based e-commerce platform JustJagsUK (now operating as Myton Automotive) came to light. This incident exposed a substantial volume of user credentials, specifically email addresses and plaintext passwords. What struck us as particularly concerning was the direct posting of this sensitive information onto a well-known hacking forum, indicating a deliberate effort to disseminate the compromised data. The sheer volume of records, exceeding 22,000, coupled with the unencrypted nature of the passwords, presents a clear and present danger to the affected user base.

The breach, identified as a database compromise that contributed to a larger combolist, involved approximately 22,816 unique records. The exposed data primarily consisted of email addresses and, critically, plaintext passwords. This lack of encryption for such fundamental credentials means that any attacker gaining access to this dataset could immediately attempt to leverage these credentials across other online services through credential stuffing attacks. The source structure of the leak points to a direct exfiltration from JustJagsUK's backend systems, with the compromised data subsequently appearing on a prominent cybercrime marketplace, underscoring the immediate threat of widespread account compromise.

While specific news coverage directly detailing the JustJagsUK breach in 2018 is limited, the general trend of e-commerce platforms becoming targets for credential harvesting was a significant concern during that period. The posting of such data on hacking forums is a common tactic, often preceding broader exploitation campaigns. The prevalence of plaintext passwords in breaches of this era, as highlighted by numerous cybersecurity reports and threat intelligence feeds from organizations like Troy Hunt's "Have I Been Pwned" (where this data has been documented), serves as a stark reminder of the vulnerabilities inherent in legacy security practices.