96,815 NutritionMD Users: Plaintext Password Exposure

HEROIC analysts traced a circulating dataset to NutritionMD, a United States informational platform for nutritionists and dieticians at nutritionmd.org. The breach, originally dated to August 2018, resurfaced publicly on July 23, 2025, with 96,815 records exposing email addresses and plaintext passwords.

Why the NutritionMD Breach Is Dangerous

The NutritionMD data is a clean pair of email and password for every user. There is no encryption, no hashing, and no salt between the attacker and the credentails. Health professionals often use the same email to access electronic health records, patient portals, continuing education platforms, and practice managment tools. A single reused password can unlock far more than a nutrition forum.

What Was Exposed in the NutritionMD Leak

• Email addresses
• Plaintext passwords

Why This Matters

Datasets like NutritionMD become fuel for credential stuffing attacks. Automated tools test these email and password pairs against banking sites, cloud storage, healthcare portals, and payroll platforms. For the 96,815 users in this file, any account that shares the same password is already exposed. The breach is seven years old, but the credentials inside it still work wherever people never updated them.

How Old Database Dumps Like NutritionMD Resurface

A database dump is a full or partial export of a site's backend user table. When that table is stolen or leaked, it can be traded between private channels for years before being posted publicly. Older leaks tend to recirculate when a new actor repackages them alongside fresh data to sell as combined combolists. That is why a 2018 breach can still create active account takeover risk in 2026.

Check If You Are Affected

HEROIC indexes the NutritionMD leak and more than 400 billion other exposed records. Run a free breach scan to see if your email or password appears in the NutritionMD dataset or any related leak.