Plaintext Passwords Reportedly Exposed in Salon du Bourget

HEROIC analysts reported a file tied to the exhibitor portal of Salon du Bourget, the Paris Air Show's exhibitor platform, that may expose 2,282 records from around August 2023. The data reportedly pairs email addresses with passwords stored in plain, readable text, having reportedly moved from a hacking forum into wider circulation on Telegram. Scanning your email is the only reliable way to check if you are in it.

Why an Exhibitor Account Is Worth Protecting

An exhibitor login often sits behind contact details, scheduling tools, and business correspondence tied to a company's participation in a major trade event. A reused password on an account like this can hand an attacker a believable foothold for impersonating a business contact.

Because plaintext passwords need no cracking, anyone holding this file can try the exact credential immediately.

What the Reported Exhibitor File Reportedly Contains

• Email Address: confirms a working business contact an attacker can target with convincing phishing.
• Plaintext Password: stored in readable form and usable the moment someone opens the file.

Why This Matters Beyond One Login

Business email addresses frequently reuse passwords across vendor portals, scheduling tools, and personal accounts. A single reused password here can cascade into account takeover on other platforms, fraudulent invoices sent to real contacts, or identity theft built on a trusted-looking business profile.

How Portal Data Like This Gets Out

A file like this is typically taken directly from the portal's own user database rather than collected from individual machines. From there it tends to be copied, repackaged, and reshared across forums and chat channels, sometimes years after the original event has ended.

Did This Exhibitor Leak Reach Your Email?

Scan your email first to see whether your address shows up in this exposure. If the password matches one you use anywhere else, change it on every account that shares it, prioritizing email and any linked business tools. Apply this check to work and personal addresses alike, since exhibitor accounts are often set up with whichever inbox was convenient at the time.