The SkTorrent Passwords Quietly Resurfaced on Telegram: 99,531 Exposed

HEROIC analysts have been tracking older data breaches that resurface years after the fact, and SkTorrent, a Slovak torrent tracking site, is a clear example. First breached in February 2016, the site's database is still circulating today, with 99,531 records exposed, including usernames, email addresses, and passwords stored in plain text.

Why the SkTorrent Password Leak Is Dangerous

Because the passwords in this breach were stored in plaintext rather than hashed or encrypted, anyone who obtains the file gets the actual working password, not a scrambled version that needs to be cracked first. Combined with the matching usernames and email addresses, that gives an attacker everything needed to log into an account directly and immediately.

What Was Exposed in the SkTorrent Breach

• Email addresses
• Usernames
• Passwords stored in plaintext

Why This Matters

Most people reuse passwords across multiple accounts. Because this data set pairs real plaintext passwords with real email addresses and usernames, it is ideal fuel for credential stuffing, where attackers automate login attempts across email, banking, and social media platforms using the same combination. If you used the same password for SkTorrent that you use elsewhere, those other accounts are at real risk of takeover.

How Database Breaches Like This Happen

This breach originated as a direct database compromise: attackers gained access to SkTorrent's backend systems and extracted the full user table rather than collecting credentials one at a time. Because the passwords were never hashed, the data required no cracking effort, an attacker could use it the moment it was downloaded. Years later, breaches like this keep resurfacing because old databases get repackaged and redistributed on Telegram channels and dark web forums that trade in leaked credentials.

Check If You Are Affected

If you ever created an SkTorrent account, or you reuse passwords across multiple sites, it is worth checking whether your credentials have been exposed. HEROIC's free breach scanner checks your email against a database of more than 400 billion leaked records, so you can find out and change any at-risk passwords before someone else uses them.