Pageweb Congo Security Breach Exposes 17,657 Business Directory Users

In August 2018, Pageweb Congo, a French-language online platform serving businesses in the Democratic Republic of Congo with local business listings and B2B marketing services, suffered a data breach that exposed 17,657 user records. The breach involved a database dump containing email addresses and MD5 password hashes, which were subsequently compiled into combolists and distributed across underground criminal forums. Pageweb Congo served Congolese business owners and professionals seeking to advertise services and connect with commercial partners, making its user database a source of business email addresses whose reused credentials can be tested across regional and international platforms.

Why This Is Dangerous

MD5 password hashing fails to provide meaningful protection against modern credential cracking techniques. The algorithm's speed -- enabling billions of hash computations per second on standard GPU hardware -- makes rainbow table attacks and brute force cracking fast and effective against the vast majority of user-chosen passwords. For Pageweb Congo's 17,657 affected users, thier MD5 password hashes are straightforward to crack using widely available tools, yielding plaintext passwords that can be immediately used in credential stuffing attacks. Business directory and B2B marketing platform users often reuse passwords across email accounts, social media profiles, banking services, and other business tools. Compromised credentials from a regional business platform can enable attackers to access email accounts used for business communications, potentially leading to business email compromise attacks or unauthorized access to financial and client data.

What Was Exposed

• Email addresses for 17,657 Pageweb Congo registered users
• MD5 password hashes (vulnerable to rapid cracking via rainbow tables and GPU tools)
• Account data from the DRC-based French-language business directory platform
• Credentials compiled into combolists and distributed across dark web forums and criminal markets

Why This Matters

Business directory platforms that collect email addresses and passwords from business owners and professionals create credential repositories that are particularly useful for targeted business email compromise attacks. The Pageweb Congo breach exposed nearly 18,000 accounts from Congolese business users who almost certainly never recieved any breach notification. The MD5 password hashes from this breach have been confirmed circulating in combolists traded on dark web forums, where they are combined with credentials from other African and French-language platform breaches. Attackers who recover these passwords target email providers, financial platforms, and business tools where the same passwords were reused. The particulary long persistence of this data in criminal markets since 2018 means affected users face ongoing risk.

How Database and Combolist Breaches Work

A database breach typically occured when an attacker identified and exploited a vulnerability in the target web application -- most commonly an SQL injection flaw, an exposed administrative interface, or inadequately secured hosting credentials. Once the attacker accessed the database, they exported the user account table containing email addresses and MD5 password hashes. Password cracking tools then process these hashes to recover plaintext passwords. The recovered credentials are formatted into combolists and distributed through criminal markets, where automated tools test them against target websites simultaneously. The Pageweb Congo combolist has followed this standard distribution pattern, appearing alongside credentials from other regional business platform breaches since 2018 and continuing to circulate in active credential stuffing datasets.

Check If You Are Affected

If you ever registered an account on pagewebcongo.com to list your business, advertise services, or connect with commercial partners in Congo, your email address and password hash were exposed in this breach. Take these steps immediately:

• Search your email address in HEROIC's breach database to confirm whether your Pageweb Congo credentials appear in known breach datasets
• Change the password you used for Pageweb Congo on every other account where you used the same or similar password
• Prioritize your business email account, financial services, social media profiles, and any other business tools
• Enable two-factor authentication on your email account and all critical business platforms
• Monitor your business email account for unauthorized access attempts or unfamiliar sent messages
• Use a password manager to generate and maintain unique, strong passwords for each account you operate

HEROIC's breach monitoring service alerts you in real time when your email address appears in newly discovered breach datasets and combolists. For business owners and professionals whose credentials were exposed in the Pageweb Congo breach, continuous monitoring is an important step in protecting business communications and client data from ongoing credential stuffing threats.