The Radio Canada International Database Breach Exposed 47K Passwords

HEROIC analysts uncovered the Radio Canada International database breach while scanning aggregated credential dumps circulating on dark web forums. The breach, which occured in August 2018, exposed 47,287 user records from the publicly funded Canadian media outlet. Compromised data included email addresses and MD5 password hashes, a particularly weak hashing format that attackers can crack with widely available tools.

Why Cracked Password Hashes Are a Weapon Against You

MD5 hashes are not true password protection. Attackers who recieve a dump of MD5-hashed credentials can run them through rainbow table lookups or brute-force tools and recover the original plaintext password within minutes to hours. Once they have your real password, every account where you used that same password becomes a target across email, banking, and social platforms.

What Was Exposed in the Radio Canada International Breach

• Email Address
• Password Hash (MD5)

Why a 2018 Breach Still Threatens Canadians Today

Older breaches do not become harmless with age. Credential stuffing tools allow attackers to seperate valid logins from dead ones by testing millions of username-password pairs against live services automatically. Victims of the Radio Canada International breach who reused their password face real risks of account takeover, identity theft, and financial fraud even years after the original incident.

How Database Breaches Work

A database breach occurs when an attacker gains unauthorized access to a back-end data store, typically by exploiting a vulnerability in a web application, using stolen administrative credentials, or targeting an unpatched database server exposed to the internet. Once inside, they export user tables containing account information and either sell the data on dark web markets or use it directly in automated attacks.

Check If Your Data Was Exposed

HEROIC's free breach scanner searches across 400 billion-plus leaked records to tell you instantly whether your email or passwords appeared in the Radio Canada International breach or hundreds of thousands of others. Run your free scan at HEROIC to find out what attackers may already know about you.