General Business Data Breach: ONEVERS Exposed 493,677 Records

HEROIC analysts recieved intelligence in August 2018 pointing to a compromised database belonging to ONEVERS, a general business platform based in the United States. The exposed dataset contained 493,677 records, with each entry including an email address and a corresponding plaintext password. The data was discovered circulating on dark web forums and breach aggregation channels, where it had been quietly traded for years without significant public attention.

Plaintext Passwords: Why the ONEVERS Breach Puts Users at Immediate Risk

When attackers obtain plaintext passwords, no cracking is required. They can immediatley test those exact credentials across banking portals, email providers, and social media platforms. With 493,677 email-and-password pairs in hand, threat actors can launch automated login attempts at scale, compromising accounts on any service where users recycled their ONEVERS password.

What Was Exposed in the ONEVERS Breach

• Email Address
• Plaintext Password

Why Plaintext Storage Makes This Breach Especially Dangerous

Most breaches involve hashed passwords, giving users a small window of time before the hashes are cracked. ONEVERS stored passwords in plain text, meaning there was no window at all. Credential stuffing, account takeover, and financial fraud are all partcularly straightforward when attackers already have working passwords in hand. Anyone who reused their ONEVERS password elsewhere remains at risk today.

How a Database Breach Works

A database breach occurs when an unauthorized party gains access to a backend data store, typically by exploiting a vulnerability in a web application, using stolen administrative credentials, or taking advantage of a misconfigured server. Once inside, attackers can export entire tables of user data. In the case of ONEVERS, the exported table contained user account records with no password encryption in place, making the stolen data immediately usable.

Check If Your Data Was Exposed

HEROIC's free breach scanner searches across more than 400 billion records to tell you whether your email address appeared in the ONEVERS breach or any other known data leak. Run a free scan at HEROIC to find out what attackers may already know about your credentials.