Mauro Pascoli’s 2018 Breach: 15,047 Passwords Just Surfaced

HEROIC analysts identified a dataset from Mauro Pascoli, an Italian company in Ravenna known for Vespa and Piaggio scooter parts and its Vespa Collection museum, circulating on a hacking forum. The breach dates back to March 7, 2018, nearly eight years ago, but the data is only now surfacing widely. It contains 15,047 user records made up of email addresses and passwords stored in plaintext.

Why This Is Dangerous

Plaintext passwords are the worst-case scenario in a data breach. There is no hashing, no salting, and no cracking required. Anyone who gets hold of this dataset can read every password exactly as the user typed it, then immediately try logging in with it anywhere else that user might have an account.

What Was Exposed in the Mauro Pascoli Breach

• Email addresses of registered Mauro Pascoli customers
• Passwords stored in plaintext, with no encryption at all

Why This Matters

Because these passwords were never protected, they are ready to use the moment someone downloads the file. If any of the 15,047 affected users reused their Mauro Pascoli password on an email account, a bank, or a social media profile, an attacker can walk straight into those accounts through credential stuffing, opening the door to account takeover, identity theft, and financial fraud.

How a Database Breach Ends Up as a Combolist

This incident is classified as both a database breach and a combolist. The 15,047 records were pulled directly from Mauro Pascoli's own database, most likely through a flaw in how the site stored customer accounts, then repackaged into a combolist: a plain text file pairing each email with its password. Combolists made from plaintext data are especially valued on hacking forums because they require no extra work. An attacker can plug the list straight into automated login tools and start testing accounts immediately.

Check If You Are Affected

If you have ever shopped with Mauro Pascoli or reuse passwords across sites, it is worth checking whether your information appears in this breach or any other. HEROIC's free breach scanner searches a database of more than 400 billion leaked records to show you instantly if your email address has been exposed.