prretyfeet.hk Data Breach Exposes 31,109 User Records

HEROIC's DarkHive system discovered the prretyfeet.hk data breach, exposing 31,109 records on August 26, 2018. prretyfeet.hk was a Hong Kong-based Chinese-language online forum that has since expired. The breach exposed the email addresses and MD5 hashed passwords of over 31,000 registered users.

Why This Is Dangerous

MD5 is a cryptographically broken hashing algorithm that can be cracked using rainbow tables and brute force tools in minutes to hours for common passwords. The 31,109 exposed password hashes from prretyfeet.hk represent credentials that attackers can crack and then use in credential stuffing campaigns targeting other services. With over 31,000 records, this dataset provides meaningful scale for automated account takeover operations.

What Was Exposed

• Email addresses
• MD5 hashed passwords
• User account registration data
• Geographic data indicating Hong Kong origin

Why This Matters

Forum breaches expose users who may have registered with the same email and password they use across other platforms. The continued circulation of prretyfeet.hk credentials in dark web combolists years after the initial breach demonstrates the long-lasting risk of historical data exposures. Users who have not changed their passwords since 2018 remain at risk of account takeover on any platform where they reused those credentials. MD5 hashes, once cracked, provide attackers with the original plaintext password for immediate exploitation.

How Database Breaches Work

Database breaches occur when attackers gain unauthorized access to an organization's data systems through software vulnerabilities, misconfigured servers, or compromised credentials. After extracting user records, they post the data on hacking forums and distribute it through dark web marketplaces and combolists that continue circulating for years. HEROIC's DarkHive system continuously monitors these channels to detect newly surfaced breach datasets and catalog them so affected individuals can check their exposure.

Check If You Are Affected

HEROIC offers a free identity scanner searching over 400 billion records including data from the prretyfeet.hk breach. Visit heroic.com to check if your information was exposed and update your passwords on any accounts where you may have reused your credentials.