French Print Customers Exposed in the 166K Record Rapid Flyer Breach

HEROIC analysts identified the Rapid Flyer breach, which occured in July 2019 and exposed 166,665 user records from the French printing service. The compromised data included email addresses, first names, last names, phone numbers, birthdays, and passwords stored as unsalted MD5 hashes. This breach is seperate from typical credential dumps in that it also exposes rich personal identifying information, creating a complete profile attackers can use for identity fraud.

How Full Names, Birthdays, and Phone Numbers Enable Identity Fraud

Attackers who obtained Rapid Flyer data recieved far more than just login credentials. Full names, birthdays, and phone numbers together form a powerful identity fraud toolkit. This data can be used to bypass knowledge-based security questions, impersonate victims in social engineering calls, and support SIM-swapping attacks that hand attackers control of a victim's phone number and every account tied to it.

What Was Exposed in the Rapid Flyer Breach

• Email Address
• First Name
• Last Name
• Phone Number
• Birthday
• Password Hash

Why Rapid Flyer's Unsalted MD5 Hashes Make This Breach Worse

The Rapid Flyer breach is partcularly damaging because passwords were stored using unsalted MD5 hashing, a method now considered wholly inadequate. Without a salt, identical passwords produce identical hashes, allowing attackers to crack entire batches at once using precomputed rainbow tables. Combined with the real personal details also exposed, cracked passwords give attackers the ability to log into victim accounts with full confidence in the identity they are impersonating.

How Database Breaches Work

A database breach occurs when an attacker gains unauthorized access to a company's stored user data, typically through exploiting software vulnerabilities or compromised administrative credentials. Once inside, the attacker exports the database contents. Rapid Flyer stored user data including personal details and password hashes in a backend database that was accessed without authorization, resulting in the full dataset being leaked and later circulated in dark web forums.

Check If Your Data Was Exposed

HEROIC's free breach scanner searches over 400 billion exposed records to tell you if your email address appeared in the Rapid Flyer breach or any other known data leak. Run a free scan now and find out what personal data attackers may already have on file about you.