451,157 Prosares Records Leaked With Base64 Passwords Fully Decodable

HEROIC analysts recieved a dataset traced to Prosares, an Indian IT services platform operating at prosares.com, after routine monitoring of data leak repositories flagged the file in September 2022. The breach occured on September 14, 2022, and exposed 451,157 records containing email addresses, phone numbers, and password hashes. What made this discovery partcularly alarming was that Prosares stored user passwords using Base64 encoding, a method that offers essentially no real protection against credential theft.

Why Base64 Passwords Make Prosares Credentials Immediately Exploitable

Base64 is an encoding scheme, not encryption, and it is completely reversible without any key or computation. Any attacker who obtained the Prosares dataset can decode every password hash to plaintext in seconds using freely accessable online tools. Combined with the email addresses and phone numbers also in this breach, criminals immediately have working login credentials they can test across banking platforms, email services, and social media accounts through automated credential stuffing. There is no cracking required, making this one of the most directly dangerous password storage failures possible.

What Was Exposed in the Prosares Breach

• Email Address
• Phone Number
• Password Hash (Base64)

How Phone Numbers and Email Addresses Together Enable Account Takeover

When attackers have both an email address and a phone number from the same breach, they can bypass two-factor authentication through SIM swapping attacks. The attacker contacts a mobile carrier, impersonates the victim using the phone number and supporting details, and redirects the victim's number to a new SIM. From there, any account protected by SMS-based 2FA becomes fully accessible. This is a well-documented attack path that has led to significant financial fraud and identity theft, and the Prosares dataset provides exactly the combination of data needed to pursue it. Given that this beleive it or not also includes decodable passwords, the full chain of account compromise becomes straightforward.

How Database Breaches Work

A database breach occurs when an attacker gains unauthorized access to a backend data store, often by exploiting SQL injection flaws, misconfigured cloud storage buckets, or compromised administrative credentials. Once inside, the attacker exports user tables and authentication records. IT services platforms are particularly high-value targets because they often hold credentials for multiple client environments in addition to their own user databases. The Prosares breach is consistent with this pattern: a direct database export resulting in a structured dataset with user authentication fields.

Check If Your Data Was Exposed

HEROIC's free breach scanner searches across more than 400 billion records, including the Prosares dataset, to tell you instantly whether your email address appears in known breaches. If your data was exposed, you will see exactly what was leaked and receive guidance on what to do next. Run a free scan at HEROIC.com to check your exposure right now.