mobileshop Breach Put 7,947 UAE Online Shoppers’ Data on the Dark Web

HEROIC analysts identified a leaked dataset tied to mobileshop, a now-defunct online retailer in the United Arab Emirates that sold mobile phones and electronics. The breach dates to August 26, 2018, and exposed 7,947 records containing email addresses and SHA1 hashed passwords, later shared on a hacking forum.

Why This Old Electronics Retailer Breach Still Matters

SHA1 hashing is outdated and can be cracked quickly with tools freely available today. Once an attacker recovers the original password behind the hash, they have a working email and password pair for anyone who shopped at mobileshop. Because the retailer no longer exists, no one is left to force password resets, leaving that exposure permanent for anyone who reused the password.

What Was Exposed in the mobileshop Breach

• Email addresses
• SHA1 hashed passwords

Why This Matters for Online Shoppers

People who shop online often reuse the same password across multiple retail sites, email accounts, and payment services. Attackers exploit that habit through credential stuffing, automatically testing leaked email and password combinations across banking sites, email providers, and other shopping accounts. A reused mobileshop password could open the door to account takeover, fraudulent purchases, or identity theft.

How This Database Breach Became a Combolist

mobileshop is classified as both a database breach and a combolist. The original incident was a direct compromise of the retailer's customer database. That data was later reformatted into a combolist, a stripped-down file of email and password pairs built for automated login attempts, which is why it continues to resurface on hacking forums years after the original breach.

Check If Your Email Was Exposed in the mobileshop Breach

If you ever shopped at mobileshop, or reused that password on another site, it is worth checking your exposure. HEROIC's free breach scanner searches more than 400 billion leaked records, including this one, and tells you instantly whether your information has been compromised.