Tech Readers Beware: The PC Buyer’s Guide Breach Leaked 51K Accounts

HEROIC analysts recieved and reviewed a database breach tied to PC Buyer's Guide, a Philippines-based tech news and product review platform. The incident, which occured in August 2018, exposed 51,035 records containing email addresses and PHPass hashed passwords. The data has continued circulating in breach aggregation communities years after the original incident, putting affected users at ongoing risk.

Why Hashed Passwords From PC Buyer's Guide Still Put You at Risk

PHPass was a common hashing scheme in 2018, but it is partcularly vulnerable to modern cracking techniques including GPU-accelerated brute force and precomputed rainbow table attacks. Attackers who obtain these hashes can work to crack them offline, and once plaintext passwords are recovered, they can be tested against email providers, banking portals, and other accounts without detection.

What Was Exposed in the PC Buyer's Guide Breach

• Email Address
• Password Hash

Why the PC Buyer's Guide Breach Still Matters Today

Breaches from 2018 do not expire. Credentials from this incident feed directly into credential stuffing toolkits used for account takeover at scale. Users who recycled the same email and password combination across other services remain accessable to attackers who work through these lists systematically, targeting banking, social media, and corporate accounts.

How a Database Breach Works

A database breach occurs when an attacker gains unauthorized access to a backend database, typically by exploiting a vulnerability in a web application, a misconfigured server, or stolen administrative credentials. Once inside, the attacker extracts stored records in bulk. Even password hashes are valuable because they can be cracked offline using specialized tools, revealing the original plaintext passwords without any further interaction with the target system.

Check If Your Data Was Exposed

HEROIC offers a free breach scanner backed by a database of over 400 billion compromised records. Search your email address now to find out if your credentials appeared in the PC Buyer's Guide breach or any other known incident, and take action before attackers do.