Polleninformation Database Breach Exposes 20,000 Austrian User Records

HEROIC DarkHive identified a breach of Polleninformation, an Austrian pollen forecast and allergy service, on 26 November 2024. The database compromise exposed 20,000 user records containing email addresses, usernames, first and last names, and password hashes stored with a non standard algorithm.

Why This Health Information Breach Is Dangerous

Allergy platforms collect a loyal, repeat user base who sign up to receive personalized alerts. Attackers can weaponize that trust with phishing emails in German that pretend to come from Polleninformation about account upgrades, data retention, or premium forecasts, tuned to the current pollen season.

What Was Exposed in Polleninformation

The 20,000 records include email address, username, first name, last name, and password hash. Because the hash algorithm is labelled Other rather than bcrypt, users should treat their Polleninformation password as recoverable and rotate it everywhere they reused it.

Why This Matters

Austria enforces GDPR strictly through the Datenschutzbehorde, and a breach involving health adjacent data and inadequate hashing can trigger formal investigations. For affected users, the concern is credential reuse because allergy tracker passwords often mirror email and fitness app passwords.

How Database Breaches Happen

Breaches of small information services usually come from unpatched web applications, compromised developer machines, or leaked admin credentials bundled in infostealer logs. Attackers export the user table and list it on BreachForums for resale to credential stuffing operators.

Check If You Are Affected

HEROIC monitors over 400 billion compromised records across the surface, deep, and dark web. Run a free scan to see whether your email appears in the Polleninformation leak, then change any shared password, switch to a password manager generated passphrase, and enable multi factor authentication on your primary email account.