Our Analysts Found the Decorating the House Breach on Hacking Forums

HEROIC analysts discovered the Decorating the House (집꾸미기) breach database circulating on a well-known hacking forum during routine dark web monitoring. In March 2020, this South Korean interior design shopping platform recieved a devastating database compromise that exposed 1,296,289 customer records. The leaked data included email addresses, usernames, full names, phone numbers, and SHA1 password hashes, providing attackers with everything needed for large-scale credential stuffing operations.

How Attackers Weaponize SHA1 Hashes, Usernames, and Phone Numbers From This Breach

SHA1 password hashes are considered weak by modern standards and are accessable to cracking via rainbow tables and GPU-accelerated tools that threat actors routinely deploy. Once cracked, the plaintext passwords can be paired with the exposed email addresses and usernames to launch automated login attempts across major platforms. Phone numbers in the dataset make victims vulnerable to SIM-swapping, a method attackers use to bypass two-factor authentication on financial and social accounts.

What Was Exposed in the Decorating the House (집꾸미기) Breach

• Email Address
• Username
• First Name
• Last Name
• Phone Number
• Password Hash (SHA1)

Why 1.3 Million South Korean Shopping Accounts Being Leaked Still Matters Today

The 1,296,289 records from this breach have occured in underground forums for years, accumulating more exposure over time as the data gets repackaged and redistributed. South Korean users are partcularly targeted because the country has high rates of digital banking and mobile payment adoption, making valid credentials especially valuable. Any user who reused their Decorating the House password on another service remains at active risk of account takeover.

How a Database Breach Works

A database breach occurs when an attacker exploits a vulnerability in a web application or server to gain unauthorized access to the backend database. Attackers dump user tables containing account credentials and personal information, then compress and distribute the data through private channels, hacking forums, and Telegram groups where other criminals use it for credential stuffing campaigns targeting other platforms.

Check If Your Data Was Exposed

HEROIC's free breach scanner covers more than 400 billion leaked records and can tell you instantly whether your email appeared in the Decorating the House breach or any other known incident. Visit HEROIC.com and run a free scan today.