The Smart Connections Breach Put 10,830 Plaintext Passwords Online in 2018

In August 2018, Smart Connections, a U.S.-based executive search and business consulting firm that has since shut down, suffered a data breach affecting 10,830 users. What makes this breach particularly alarming is that passwords were stored in plaintext, meaning no cracking was required. Any attacker who obtained this dataset had immediate access to working email and password combinations. The data has since been folded into combolist compilations that continue to circulate in underground markets and Telegram channels as of 2025.

Why This Is Dangerous

Plaintext password storage is one of the most severe security failures a platform can commit. There is no decryption step, no hash to crack. An attacker holding this dataset had 10,830 ready-to-use credentials the moment the breach occured. Because Smart Connections served executives, business developpment professionals, and investors, those credentials likely unlock high-value accounts at other platforms, including corporate email systems, financial services, and CRM tools.

What Was Exposed

• 10,830 user records in total
• Email addresses from registered accounts
• Passwords stored and leaked in plaintext
• Platform served executive search and venture consulting in the United States
• Data classified as Database and Combolist breach type
• Originally leaked August 21, 2018

Why This Matters

Executive-level credentials are among the most valuable targets in credential stuffing operations. A login from someone in business development or venture capital likely grants access to sensitive communications, deal flow data, and financial accounts. The Smart Connections breach handed attackers a pre-screened list of professionally active individuals with plaintext passwords. Even though the company is defunct, the users who registered on the platform are still active online, and many have not changed passwords they used in 2018. This makes the dataset highly relevant to corporate security teams today.

How Plaintext Password Breaches Work

Most databases store passwords as hashed values, requiring attackers to crack them before use. When a platform stores passwords in plaintext, that intermediate step is eliminated entirely. The breach at Smart Connections required only a single database exfiltration event to produce a fully usable credential list. That list was posted to underground forums, picked up by combolist aggregators, and has been recycled into automated stufffing attacks ever since. The absence of any hashing means every single record in this breach is as actionable today as it was the day it leaked.

Check If You Are Affected

HEROIC's free breach scanner searches across more than 400 billion exposed records, including this Smart Connections dataset. If your email address appears in this breach or any other known leak, HEROIC will flag it immediately. Given the plaintext nature of this breach, checking your exposure is especially urgent.