Solymail Data Breach Exposes Email and Password Hashes

HEROIC's DarkHive system discovered the Solymail breach, exposing 126 records in September 2023. This Peruvian email marketing and corporate email service suffered a database compromise that revealed email addresses and MD5 password hashes, putting users of this Spanish-language business platform at risk of credential theft and account takeover.

Why This Is Dangerous

Email marketing platforms hold privileged access to customer contact lists and marketing campaign data, making them highly valuable targets for attackers. A compromised account on an email service platform can be weaponized to send phishing emails to thousands of the company's clients using trusted sender identities. The MD5 hashing algorithm used to protect passwords has been cryptographically broken for years and can be cracked using widely available tools and rainbow table lookups.

What Was Exposed

• Email Address
• Password Hash (MD5)

Why This Matters

Users who reused their Solymail passwords on other platforms remain at risk even years after this breach, because MD5 hashes are trivially cracked with modern hardware. Exposed email addresses can be used to craft highly targeted phishing campaigns, especially against business users who registered with corporate email addresses. Identity theft risks are elevated for anyone whose email address is now confirmed as belonging to a business that handles email communications.

How Database Breach Works

A database breach occurs when an attacker gains unauthorized access to a website or application's backend database, typically through SQL injection vulnerabilities, stolen administrative credentials, or misconfigured server settings. The attacker extracts user records including account credentials, personal information, and any other stored data. This extracted database is then shared on underground forums or Telegram channels where it becomes a resource for follow-on attacks.

Check If You Are Affected

HEROIC offers a free identity scanner searching over 400 billion records including data from the Solymail breach. Visit heroic.com to check if your information was exposed.