84,677 Passwords From the PokEdit Breach Just Surfaced on the Dark Web

HEROIC analysts flagged the PokEdit breach after spotting compromised credentials from the site appearing in credential stuffing lists on underground forums. PokEdit is a US-based online store that sold modified Nintendo consoles and games, and in November 2017 its user database was compromised, exposing 84,677 records. The stolen data included email addresses and password hashes, and what is partcularly concerning is that not all passwords were protected by strong hashing algorithms, meaning some accounts were far easier to crack than others.

Why Gaming and Hobby Store Credentials Are Targeted by Attackers

E-commerce accounts at niche hobby stores may seem like low-value targets, but attackers know that customers at sites like PokEdit often use the same email and password they use on Amazon, PayPal, or their email provider. When a store like PokEdit is breached, those credentials are immediately tested against dozens of high-value platforms. The mix of hashing algorithms used by PokEdit also meant that some users had their passwords stored in a format that cracking tools can break very quickly. Once cracked, those passwords are accessable to any criminal who purchases the database, enabling account takeovers and financial fraud.

What Was Exposed in the PokEdit Breach

• Email Address
• Password Hash

Why an E-Commerce Breach From 2017 Still Threatens You Today

The PokEdit breach data has continued to circulate in credential stuffing lists years after the original incident. Old e-commerce breach data is considered valuable because shoppers tend to reuse passwords, and accounts created years ago are often never updated. If you shopped at PokEdit and used the same password on any other site, you remain at risk of credential stuffing, account takeover, and identity theft. Financial fraud can follow quickly once an attacker gains access to an account linked to payment information. Many victims do not realise they have been affected until suspicious activity appears on their accounts or credit reports.

How a Database Breach Works

A database breach occurs when an attacker exploits a weakness in a website's servers or software to copy out the stored user database. For an e-commerce platform like PokEdit, that database contains every customer account, including emails and passwords. Once the attacker has a copy, they can attempt to crack the password hashes offline at high speed using specialized tools, then sell the cracked credentials or use them directly in automated login attacks. The store may not detect the breach for weeks or months, by which point the data is already in wide circulation.

Check If Your Data Was Exposed

HEROIC's free breach scanner checks your email address against more than 400 billion exposed records, including data from the PokEdit breach and thousands of other incidents. Find out in seconds whether your credentials have been compromised. Scan your email for free at HEROIC and take the first step toward protecting your accounts today.