MLMScores Data Breach Exposed 9,759 US Users’ Emails and Passwords

HEROIC analysts identified a leaked dataset tied to MLMScores, a U.S.-based website that provides ratings and reviews of multi-level marketing companies. The breach surfaced on a hacking forum on October 3, 2018, exposing 9,759 records containing email addresses and plaintext passwords.

Why Plaintext Passwords Make the MLMScores Leak So Dangerous

Plaintext passwords need no cracking or decoding, they are usable the moment an attacker opens the file. Anyone who registered on MLMScores to research or review MLM companies now has that same email and password combination sitting in a hacking forum, ready to be tested against other accounts.

What Was Exposed in the MLMScores Breach

• Email addresses
• Plaintext passwords

Why This Matters for US Consumers

MLMScores catered to US consumers researching multi-level marketing opportunities, a group that skews toward everyday people, not security professionals. Attackers take leaked email and password pairs like these and run them through automated credential stuffing tools against email providers, banking sites, and shopping accounts. If someone reused their MLMScores password elsewhere, that account is now exposed to takeover, and potentially to identity theft or financial fraud.

How This Database Breach Turned Into a Combolist

MLMScores is classified as both a database breach and a combolist. The initial incident was a direct compromise of the site's database, likely through a vulnerability that let attackers pull user records straight from the backend. Once exposed, that data was reformatted into a combolist, a stripped-down file of email and password pairs designed for automated login attempts, explaining why it continues to circulate on hacking forums.

Check If Your Email Was Exposed in the MLMScores Breach

If you ever created an account on MLMScores, or reused that password on another site, it's worth checking your exposure. HEROIC's free breach scanner searches more than 400 billion leaked records, including this one, and tells you instantly whether your information has been compromised.