The LizardSquad Leak Exposed 11,297 UK-Registered Accounts

HEROIC analysts identified the LizardSquad breach, an incident dating back to January 16, 2015, that exposed 11,297 records tied to the LizardStresser booter service. The compromised data included email addresses and passwords stored in plaintext.

Why Plaintext Passwords Leave Nothing for Attackers to Guess

When passwords are stored in plaintext, there's no hashing or encryption standing between the data and anyone who gets access to it. Every password in this breach was immediately readable the moment the database was exposed, no cracking tools or time investment required on the attacker's part.

What Was Exposed in the LizardSquad Breach

• Email addresses
• Plaintext passwords

Why This Matters Even for a Niche Service

Whatever the original service was used for, the people behind these accounts are real, and many of them likely reused this email and password combination elsewhere. Attackers routinely take exposed plaintext credentials like these and test them against email providers, banking sites, and social media platforms through credential stuffing. A single successful match can lead to account takeover, identity theft, or financial fraud on accounts that have nothing to do with the original breach.

How a Database Breach Like This Happens

A database breach occurs when an attacker gains unauthorized access to the backend system storing a service's user records, often through an unpatched vulnerability, a misconfigured server, or weak administrator credentials. Once inside, the attacker can extract the entire user table, including emails and passwords, in a single operation. Services with weak security practices are especially vulnerable, since storing passwords in plaintext removes any barrier between exposure and misuse.

Check If Your Email Was Exposed in This or Any Other Breach

Don't leave it to chance. HEROIC's free breach scanner checks your email against a database of more than 400 billion leaked records, including this LizardSquad breach, and tells you immediately if you're affected. If you find a match, change that password everywhere you've reused it and turn on multi-factor authentication wherever it's available. Scan now to check your exposure.