Philippines Users Targeted in the 7,369-Record SERP-P Breach

In August 2018, HEROIC found 7,369 email addresses and MD5 password hashes from the Socioeconomic Research Portal for the Philippines (SERP-P) exposed on a hacker forum. The database and combolist were compiled from a breach of the platform's user records.

Why the SERP-P Breach Is Dangerous

MD5 hashes are a weak form of password protection and are easily reversed using precomputed lookup tables called rainbow tables. Attackers can quickly recover the original plaintext passwords from this dataset, enabling widespread account compromise.

What Was Exposed in the SERP-P Leak

• Email addresses
• MD5 password hashes

Why This SERP-P Data Puts You at Risk

Once MD5 hashes are cracked, attackers can use the recovered passwords for credential stuffing across banking, email, and social platforms. Victims who reused their SERP-P password on other accounts face immediate risk of account takeover and identity theft.

How Database Breaches Work

Database breaches occur when attackers exploit vulnerabilities in a website's infrastructure to extract stored user data. Once inside, they download the entire user table -- including credentials -- and distribute the data on underground forums. Combolists are then assembled from multiple breaches to amplify the scale of attacks.

Check If Your Data Was Exposed

HEROIC operates one of the world's largest breach databases, covering more than 400 billion leaked records. Use HEROIC's free breach scanner to check if your email address or credentials appeared in the SERP-P leak or thousands of other breaches in our database.