8,056 Hashed Passwords From Soit dit en Passant Hit the Dark Web

HEROIC analysts identified a data breach affecting Soit dit en Passant, a French-language independent music webzine covering alternative and independent artists. The breach was first observed in August 2018, when a dataset containing records from 8,056 users surfaced on underground sources. The exposed data included email addresses and MD5 password hashes. The dataset was subsequently compiled into combolists and distribted across hacking forums and private channels, where it continues to appear in active credential stuffing operations targeting other platforms years after the original incident.

Why This Is Dangerous

Independent music fans who registered on a niche French webzine are not the typical target people imagine when thinking about cybercrime victims. That is precisely what makes this breach valueable to attackers. Users of small community sites tend to reuse passwords across platforms, rarely think to change them, and are almost never notified when a site like this is breached. The MD5 password hashing used by Soit dit en Passant offers little real protection by today's standards. Most MD5 hashes from common or short passwords can be reversed in seconds using rainbow tables or GPU-based cracking tools, converting what looks like protected data into a directly usable list of login credentials.

What Was Exposed

• Email addresses -- 8,056 unique user accounts
• MD5 password hashes -- weak protection, easily reversed with modern cracking tools
• Platform type: Music (independent music webzine, French-language)
• Country of origin: France
• Breach structure: Database dump distributed through underground forums and combolist compilation
• Date first observed: August 21, 2018

Why This Matters

Soit dit en Passant is the type of site that never makes headlines when breached. It is small, niche, and long forgotten by most of its former users. That invisibility is a liability, not a protection. The people in this dataset have had no reason to update their passwords, which means credentials from 2018 are still live on platforms that share the same email-and-password combination. This breach is a reminder that credential risk does not expire when a website goes quiet. Combolists are continuously refreshed with older data, and automation makes it cheap to test thousands of accounts at once against active services.

How MD5 Password Hash Breaches Work

MD5 is a mathematical function that converts a password into a fixed string of characters. In theory, the original password cannot be recovered. In practice, MD5 has been considered broken for security purposes for well over a decade. Pre-computed rainbow tables contain the MD5 equivalents of millions of common passwords, enabling instant reversals. For passwords not in those tables, modern graphics cards can test tens of billions of MD5 hashes per second. Security organizations have widely recomended against MD5 for password storage since at least 2010, meaning that any site still using it in 2018 was already operating well below minimum acceptable standards. Once cracked, the resulting plaintext passwords are fed directly into credential stuffing tools targeting email providers, social networks, financial platforms, and workplace systems.

Check If You Are Affected

If you ever registered on Soit dit en Passant at soitditenpassant.com, your email address and a crackable MD5 password hash were exposed. HEROIC's free breach scanner checks your email against a database of more than 400 billion leaked records sourced from thousands of data breaches around the world. You may have been affected by this breach and others you have never heard of. Run a free scan at HEROIC now and find out exactly where your personal data has surfaced across the dark web and underground sources.