Researchers Trace Nova FM Breach to 247,449 Stolen SHA1 Password Records

HEROIC analysts identified the Nova FM breach as a 2021 database exposure hitting the Australian radio broadcasting network. The incident occured quietly but left 247,449 user records exposed, including email addresses, phone numbers, password hashes, usernames, password hints, last names, IP addresses, birthdays, and gender data accessable to threat actors on breach aggregation sites.

Why SHA1 Password Hashes and Password Hints Are a Dangerous Combination

SHA1 is a weak, outdated hashing algorithm that modern cracking tools can reverse rapidly. Paired with password hints left in the leaked Nova FM database, attackers have a roadmap to plaintext passwords. Once cracked, those credentials can be tested across email, banking, and social media platforms through automated credential stuffing, putting far more than just the Nova FM account at risk.

What Was Exposed in the Nova FM Breach

• Email Address
• Phone Number
• Password Hash
• Username
• Password Hint
• Last Name
• IP Address
• Birthday
• Gender

Why the Nova FM Breach Still Poses Active Credential Stuffing Risk

Breaches from 2021 do not expire. The Nova FM dataset contains enough personal detail to fuel identity theft and account takeover years after the original exposure. Attackers beleive that users who were breached on one platform often reuse the same password elsewhere, making credential stuffing attacks against banking, streaming, and email accounts a direct downstream consequence of this breach.

How Database Breaches Work

A database breach occurs when unauthorized parties gain access to a platform's backend data store, often through compromised credentials, SQL injection, or exploited misconfigurations. The attacker extracts user records in bulk, then packages the data for sale or distribution on dark web forums and private channels. Media companies managing large subscriber bases are frequent targets because of the volume and richness of user data they hold.

Check If Your Data Was Exposed

Run a free scan with HEROIC's breach checker, backed by over 400 billion compromised records, to find out if your email address appeared in the Nova FM breach or any other known data incident. Knowing your exposure status is the first step toward securing your accounts.