The MeFeedia Breach Gave Hackers IP Addresses, Emails, and Passwords

HEROIC analysts flagged the MeFeedia breach while scanning breach aggregation sources for datasets combining email addresses with IP address and gender data. The breach occured in September 2019, exposing 733,138 records from this US-based video discovery platform. The compromised dataset included email addresses, MD5 password hashes, usernames, IP addresses, and gender information, giving attackers a rich profile on each affected user that goes well beyond a simple credential pair.

How IP Addresses and Gender Data Turn a Password Breach Into a Profiling Attack

Most credential breaches expose email and password alone, but the MeFeedia breach is partcularly dangerous because it also includes IP addresses and gender data. Attackers can use IP addresses to approximate user locations, cross-reference accounts across platforms, and craft targeted social engineering campaigns. Combined with crackable MD5 password hashes and usernames, this data gives bad actors everything they need to profile, impersonate, and exploit individual users at scale.

What Was Exposed in the MeFeedia Breach

• Email Address
• Password Hash
• Username
• IP Address
• Gender

Why 733K Records With IP and Gender Data Remain a Live Threat

The MeFeedia dataset has recieved renewed attention on dark web forums years after the initial 2019 breach. Because the platform is now defunct, many users never recieved a breach notification and have no idea their data is circulating. IP addresses captured in 2019 may no longer be accurate, but email addresses and password hashes are accessable to any attacker willing to pay a small fee in underground marketplaces, making this a persistent risk for anyone who registered on the platform.

How Database Breaches Work

A database breach occurs when an attacker extracts records directly from a website's or application's backend database without authorization. This is commonly achieved through SQL injection, exploitation of unpatched software, or compromise of server credentials. MeFeedia, like many platforms of its era, stored user passwords using the MD5 hashing algorithm, which is now considered cryptographically weak and can be cracked at high speed using commodity hardware, exposing the underlying plaintext passwords.

Check If Your Data Was Exposed

HEROIC's free breach scanner searches across 400 billion+ compromised records to check whether your email address appeared in the MeFeedia breach or any of the thousands of other incidents in our database. Visit HEROIC.com now to run a free search and find out exactly which of your credentials are at risk.