Identity Theft Risk Rises for 6,069 People in the Medius Breach

HEROIC analysts identified a dataset tied to Medius, a now-defunct South Korean health information website, that surfaced on a hacking forum on August 26, 2018. The dataset contains 6,069 records, each pairing an email address with an MD5 password hash. Because Medius dealt with health information, the accounts behind these credentials carry more personal weight than an average retail login.

Why This Breach Raises the Stakes for Identity Theft

MD5 is an outdated hashing algorithm that modern hardware can crack quickly using rainbow tables, meaning a meaningful share of these passwords can be recovered by anyone determined enough. Once cracked, an email and password pair tied to a health platform can be combined with other leaked data to build a fuller picture of a person, their identity, their habits, and their health interests, making identity theft and targeted fraud easier to pull off than with a plain login alone.

What Was Exposed in the Medius Breach

• Email addresses
• Password hashes (MD5)

Why This Matters Beyond a Single Health Site

People rarely use a unique password for every account they create, and a health information site is no exception. If a Medius password was reused elsewhere, cracked credentials from this breach can be tried against email, banking, or shopping accounts in a credential stuffing attack, opening the door to account takeover and financial fraud well beyond the original platform.

How This Database and Combolist Breach Happened

This incident is classified as a database breach that fed into broader combolists. Attackers typically gain this kind of access by exploiting a vulnerability in a website's backend or using stolen administrative credentials to extract the full user table at once. The stolen data then gets cleaned up and folded into combolists, simple email and password pair files that circulate on hacking forums and fuel automated login attacks against other sites.

Check If You Were Affected by the Medius Leak

If you ever had an account with Medius, or reused that password anywhere else, it is worth checking now. HEROIC's free breach scanner searches a database of more than 400 billion leaked records, including this one, so you can see exactly what was exposed and update any reused passwords before someone else does.