The SeaJob Data Breach Quietly Surfaced with 79,519 Records
In November 2024, SeaJob — an Indian platform serving maritime job seekers and professionals — quietly suffered a database compromise that slipped under mainstream radar. Nearly 80,000 user accounts were affected, and the exposed data includes a potent combination of personal identifiers and credential material that puts users at real, ongoing risk.
Why This Is Dangerous
Maritime professionals often hold sensitive employment credentials and may be targeted for industry-specific fraud or social engineering. The presence of bcrypt password hashes alongside full personal profiles means that even though the passwords are hashed, the surrounding data is immediately usable for phishing, account takeover, and identity theft — especially on platforms where users share the same email and password combination.
What Was Exposed
- Email addresses
- Phone numbers
- First and last names
- Birthdates
- Gender
- bcrypt password hashes
A total of 79,519 records were exfiltrated in what appears to be a direct dump of SeaJob's user database.
Why This Matters
Even with bcrypt hashing — a stronger algorithm than MD5 or SHA-1 — users who chose weak or commonly reused passwords remain vulnerable to offline cracking. Threat actors who obtain this data can:
- Run credential stuffing attacks against other platforms where affected users have accounts
- Launch spear-phishing campaigns using the full name, email, and phone number combination
- Conduct account takeover on SeaJob itself or linked job boards
- Enable identity theft through the aggregation of birthdate, gender, and contact details
How a Database Breach Works
Database breaches at platforms like SeaJob typically occur through one of several vectors: SQL injection exploiting unpatched vulnerabilities in the application layer, misconfigured database access controls that expose endpoints to the internet, or compromised administrative credentials. Once inside, attackers extract structured data — often as a single bulk dump — and distribute it via dark web forums or private Telegram channels. The structured format of the SeaJob data suggests it was pulled directly from a relational database, making it easy for other threat actors to import, parse, and exploit.
Check If You Are Affected
If you or someone you know used SeaJob, your data may be circulating on dark web marketplaces right now. Heroic's breach search engine indexes over 400 billion leaked records — one of the largest databases of its kind. Search your email address to find out if your credentials have been exposed in this or any other known breach.
Breach Breakdown
79,519 passwords exposed. Is yours one of them?
Enter your email to scan this breach plus 400B+ other leaked records. If you're compromised, we'll show you exactly where and what to change.
Free forever · No account required · Results in seconds
/img/qr-code.png)