KIKO Company

We noticed a significant data leak surfacing on a well-known hacking forum in late August 2018, impacting a considerable number of users. What struck us immediately was the age of the entity involved, KIKO Company, a business with a history dating back to 1945. This suggests a potentially long-standing vulnerability or a legacy system compromise. The dataset, containing over 11,000 records, comprised email addresses and their corresponding MD5 password hashes. The nature of the leaked credentials points towards a common, though concerning, security oversight.

The breach, discovered on August 26, 2018, originated from a database compromise affecting 11,063 records belonging to KIKO Company. The exposed data primarily consists of email addresses and MD5 password hashes. The source structure indicates a direct database exfiltration, likely from a user authentication or account management system. The presence of MD5 hashes, a deprecated and easily crackable hashing algorithm, is a critical concern, amplifying the risk of credential stuffing attacks against other services where users may have reused passwords. This type of breach falls under the category of database compromise, with the leaked data subsequently appearing in combolists, a common practice for threat actors looking to leverage compromised credentials across multiple platforms.

At the time of the leak in August 2018, there was no significant public news coverage specifically detailing the KIKO Company breach. However, the emergence of such datasets on hacking forums is a recurring theme in cybersecurity threat intelligence. Research from various security firms consistently highlights the prevalence of credential stuffing attacks fueled by these types of leaks, underscoring the ongoing threat posed by compromised password hashes, especially older ones like MD5. The broader OSINT landscape at the time was rife with discussions about the dangers of weak hashing algorithms and the continuous efforts by malicious actors to exploit them.