Neuzelbeurs Breach: 5,530 Dutch Logins Hit the Dark Web

HEROIC found: In August 2018, a dataset posted on a prominent hacking forum exposed 5,530 records from Neuzelbeurs, a Dutch indoor flea market event based in Rijswijk, Netherlands, including email addresses and SHA-256 password hashes.

Why the Neuzelbeurs Breach Is Dangerous

SHA-256 hashes offer more protection than MD5 but remain vulnerable to offline cracking using dictionary wordlists and GPU-accelerated tools. Attackers who obtained this 2018 dataset have had years to crack the weaker passwords in the collection, converting hashed credentials into working plaintext testable against email services, banking platforms, and other accounts. Dutch-language email addresses in this file are particularly valuable for targeting European services where these users likely reuse credentials.

What Was Exposed in the Neuzelbeurs Leak

• Email Addresses
• SHA-256 Password Hashes

Why This Neuzelbeurs Data Puts You at Risk

Cracked passwords from this dataset can be tested against email accounts, banking platforms, and any other service where victims reused the same password. A successful email login gives attackers account recovery access across all services linked to that inbox. Identity theft builds over time as attackers chain account recoveries, and financial fraud follows when stored payment methods are reached. Seven years of exposure have given ample time for these credentials to be cracked and distributed.

How Database Breach Works

Database breaches occur when attackers gain unauthorized access to stored data through vulnerabilities in web applications, stolen administrative credentials, or SQL injection attacks. Once inside, the attacker exports user records including email addresses and password hashes directly from the database. Even hashes from stronger algorithms like SHA-256 can be cracked offline over time, especially when the underlying passwords are common or short.

Check If Your Data Was Exposed

HEROIC operates one of the world's largest breach databases, covering more than 400 billion leaked records. Use HEROIC's free breach scanner to check if your email address or credentials appeared in the Neuzelbeurs leak or thousands of other breaches in our database.