The MoDaCo Breach Gave Hackers 447,218 Plaintext Passwords to Use

HEROIC analysts identified a 2016 data breach tied to MoDaCo, an Android enthusiast community and forum. The breach exposed 447,218 accounts, with email addresses and passwords stored in plaintext, meaning no protection was applied to them at all.

Why This Is Dangerous

Plaintext passwords are the most dangerous form of exposure in a data breach. There is no hash to crack and no encryption to break through. Anyone who gets hold of this data can read the exact password a MoDaCo member typed in and try it immediately against other accounts tied to the same email address.

What Was Exposed

• Email addresses
• Passwords (stored in plaintext)

Why This Matters

Because these passwords require no cracking at all, this breach is immediately usable by any attacker who gets a copy of it. If a MoDaCo member reused that password on an email account, a shopping site, or a banking app, an attacker can log in right away. This is exactly how a single forum breach from years ago continues to enable account takeover and fraud on completely unrelated services today.

How This Database Breach Happened

This incident is classified as a database breach, meaning attackers gained direct access to MoDaCo's user database rather than collecting credentials one at a time. Community forums are frequent targets for attackers exploiting outdated software or unpatched vulnerabilities. Once inside, an attacker can copy the entire user table in one move, which explains how a single incident exposed more than 447,000 accounts.

Check If You Are Affected

If you ever had a MoDaCo account, especially back in 2016, it is worth checking whether your information is part of this exposure. HEROIC's free breach scanner checks a database of more than 400 billion leaked records, so you can see instantly if your email address turns up and change any passwords you may still be reusing.