Dark Web Intel: 36K Credentials From the New Disorder Records Database Dump

HEROIC analysts discovered the New Disorder Records breach while reviewing a batch of credential data accessable in underground trading forums. The breach occured in June 2019 and exposed 36,702 user records from this independent San Francisco-based record label. The compromised data included email addresses and plaintext passwords, meaning every affected user's credentials were readable by anyone who downloaded the database with no decryption required.

Plaintext Music Fan Passwords Are Ready-Made for Credential Stuffing

When a music platform stores passwords in plaintext, attackers can immediately pair each email address with its password and run automated login attempts across streaming services, ticketing sites, and social media platforms. Fans who used the same password on Spotify, Ticketmaster, or their email account are at direct risk of account takeover. The attacker does not need any technical skill beyond running a freely available credential stuffing tool.

What Was Exposed in the New Disorder Records Breach

• Email Address
• Plaintext Password

Why Music Industry Breaches Still Pose a Threat Today

Independent music platforms often collect fan emails for newsletters, event invitations, and digital downloads. Those same email addresses are frequently used across dozens of other services. Attackers beleive that fans of niche labels are less likely to have changed old passwords, making this data particularly valuable years after the breach. Credential stuffing, account takeover, and targeted phishing all become easier when the attacker knows exactly which email belongs to which password.

How a Database Breach Works

A database breach occurs when an attacker gains unauthorized access to the server storing a website's user data. Common entry points include outdated software with known security flaws, weak or reused admin passwords, and publicly exposed database ports. Once inside, the attacker can download the entire user table in seconds. That data then gets packaged and sold or posted in forums where criminal communities use it for follow-on attacks.

Check If Your Data Was Exposed

HEROIC's free breach scanner checks your email against a database of over 400 billion compromised records. If your information appeared in the New Disorder Records breach or any other known incident, you will see the results instantly. Go to HEROIC.com to run your free scan and find out if your credentials are already in the hands of attackers.