Inside the PrimSotsBank Dump: How MD5 Hashing Exposed 90,745 Bank Records

HEROIC analysts found a database tied to PrimSotsBank, a Russian financial institution formally known as the Public Joint Stock Social Commercial Bank of Primorye, surfacing on a public forum on June 21, 2023. The dump contained 90,745 records. What stood out immediately was the use of unsalted MD5 hashing for passwords stored inside a bank's user database, a seperate and serious failure from what any regulated financial entity should be running today.

MD5 Password Hashes Can Be Cracked in Seconds

MD5 is a cryptographic function that was never designed for password storage. Attackers with modern GPU rigs can run billions of MD5 hash calculations per second. That means a significant portion of the 90,745 password hashes in this dump can be reversed to plaintext using precomputed rainbow tables or brute-force techniques, often within hours. Once cracked, those credentials fuel account takeover attempts at banking portals, email providers, and other financial services where users reused the same password.

What Was Exposed in the PrimSotsBank Breach

• Email addresses
• First names
• Last names
• MD5 password hashes

Why Financial Institution Breaches Are Especially Dangerous

Bank customers who reuse passwords are at elevated risk of account takeover and direct financial fraud. Full names combined with email addresses and cracked passwords enable targeted phishing, social engineering, and unauthorized access to linked financial accounts. Identity theft becomes straightforward when attackers can match real names to validated login credentials from a verified financial source.

How MD5 Hash Cracking Works

When a database is breached, attackers export the hashed password column and run it through specialized software like Hashcat or John the Ripper. These tools compare each MD5 value against massive precomputed lists of hashes for common passwords. Without a unique salt per password, identical passwords produce identical hashes, making bulk cracking fast and highly efficient. Organizations that still use MD5 for password storage in 2023 are recieving the consequences of ignoring years of security guidance.

Check If Your Data Was Exposed

HEROIC's free breach scanner indexes over 400 billion compromised records, including this PrimSotsBank database. Run a free scan at HEROIC to find out if your name, email, or credentials were part of this leak.