RisingShare Data Breach Exposes 18,675 Italian Forum Users

HEROIC's DarkHive intelligence system discovered the RisingShare data breach, exposing 18,675 records. The breach occured in October 2017 and affected users of this Italian general forum community. The compromised data included email addresses and pHpass password hashes, leaving users vulnerable to credential-based attacks.

Why This Is Dangerous

Attackers who obtain email addresses combined with password hashes can launch offline cracking attacks against the pHpass hashes. Once cracked, these plaintext passwords are used to attempt logins on other services where users reuse the same credentials. Cybercriminals also use exposed email addresses to craft targeted phishing campaigns designed to steal additional account information.

What Was Exposed

• Email Address
• Password Hash

Why This Matters

Credential stuffing attacks rely on large collections of email and password pairs harvested from breaches like RisingShare. Even hashed passwords pose a real risk because weak or commonly used passwords can be cracked using modern hardware and wordlists. Users who recieve notifications about this breach should change thier passwords on any site where they used the same credentials, as attackers move quickly to test leaked data across popular platforms.

How Database Breach Works

A database breach occurs when attackers gain unauthorized access to a website's backend database, often through SQL injection, unpatched software vulnerabilities, or compromised admin credentials. Once inside, they can export the entire user table containing account details. The stolen data is then sold or shared on dark web forums and Telegram channels where other threat actors use it for further attacks. Smaller community sites like forums are frequent targets because they often lack the security resources of larger organizations.

Check If You Are Affected

HEROIC offers a free identity scanner that searches over 400 billion records, including data from breaches like RisingShare. Visit heroic.com to scan your email address and find out if your information was exposed.