The Short Edition Breach Put 505,284 Stolen Email and Password Pairs Online in 2021

HEROIC analysts identified a database breach affecting Short Edition, a French publishing platform. The breach, dated June 2021, exposed 505,284 user records containing a broad set of personal and account data. The leaked dataset is partcularly rich in personal detail, covering email addresses, phone numbers, usernames, first and last names, birthdays, gender, salts, and salted SHA-1 password hashes.

Why Full Personal Profiles and Salted SHA-1 Hashes Still Pose a Real Threat

While salting adds some protection, SHA-1 is a deprecated algorithm that modern hardware can attack at very high speeds. Attackers who accessable this breach have complete identity profiles for each user, including phone numbers and birthdates, enabling highly convincing social engineering, SIM-swap attacks, and account recovery exploits. Combined with usernames and email addresses, the data provides multiple angles for follow-on attacks beyond simple credential stuffing.

What Was Exposed in the Short Edition Breach

• Email Address
• Phone Number
• Password Hash (SHA-1, salted)
• Username
• First Name
• Last Name
• Salt
• Birthday
• Gender

Why Half a Million Detailed French User Records Matter Beyond One Platform

The Short Edition breach provides attackers with data points that go far beyond a typical credential dump. Phone numbers enable SIM-swapping and SMS phishing. Full names paired with birthdays and emails are enough to attempt identity theft, financial fraud, and targeted phishing. Users who recieved this exposure and reused their passwords elsewhere face immediate risk of credential stuffing and account takeover across email, banking, and social media platforms.

How a Database Breach Works

A database breach occured when an attacker gains unauthorized access to a website's backend data store through exploited vulnerabilities, misconfigured servers, or compromised credentials. Once access is obtained, user tables containing personal information and password hashes can be exported entirely in a matter of minutes. The stolen data is then shared or sold on underground markets, where other criminals use it for fraud, phishing, and account takeover campaigns.

Check If Your Data Was Exposed

HEROIC's free breach scanner searches more than 400 billion records, including data from the Short Edition breach, to tell you instantly whether your email address or credentials appeared in this or any other known breach. Run a free check at HEROIC now and find out exactly what information of yours is circulating online.