77 Million Records From the Nitro PDF Breach Exposed Emails and Passwords

HEROIC analysts uncovered the Nitro PDF database breach, which occured in September 2020 and exposed 77,151,727 records. The compromised data included email addresses, phone numbers, bcrypt password hashes, first names, and last names belonging to users of the popular document conversion platform.

How Attackers Exploit Bcrypt Hashes, Emails, and Phone Numbers Together

Even though bcrypt is a strong hashing algorithm, having it paired with email addresses and phone numbers is partcularly dangerous. Attackers can use the emails for credential stuffing across other platforms, target phone numbers for SIM-swapping attempts, and spend dedicated GPU time cracking the weaker bcrypt hashes to recover plaintext passwords.

What Was Exposed in the Nitro PDF Breach

• Email Address
• Phone Number
• Password Hash
• First Name
• Last Name

Why 77 Million Document Platform Accounts Are a Long-Term Risk

Document conversion platforms handle sensitive files from businesses and individuals alike. Users who recieved services from Nitro PDF may have processed contracts, financial records, or legal documents. Attackers who crack or reuse credentials from this breach can potentially access far more sensitive material stored elsewhere under those same credentials.

How Database Breaches Work

A database breach occurs when an unauthorized party gains access to a company's stored data, typically by exploiting a vulnerability in web application code, misconfigured servers, or stolen administrative credentials. Once inside, attackers extract the database and distribute or sell it through dark web markets and private channels.

Check If Your Data Was Exposed

HEROIC's free breach scanner searches across more than 400 billion records to tell you instantly whether your email or credentials appeared in the Nitro PDF breach or any other known data leak. Run a free scan now at HEROIC.com.