SOMECITY Data Breach: 10,723 Records Exposed (Japan, 2018)

Japan's Streetball League and the August 2018 Batch Disclosure

SOMECITY -- Japan's top streetball league, blending sport, style, and urban culture -- suffered a data breach in August 2018 that exposed 10,723 user records. The breach hit underground forums on August 26, 2018, as part of a larger coordinated batch disclosure that included breaches from Thailand, Germany, the United States, and Indonesia. Niche cultural organizations like SOMECITY are often the last to implement robust security -- and the first to be swept up when attackers collect databases across multiple platforms simultaneously.

SOMECITY Data Breach (August 2018): Breach Summary

• Records Exposed: 10,723
• Data Types: Email addresses, password hashes
• Password Hash Type: Unknown format (treat as fully compromised)
• Breach Type: Database / Combolist
• Country Affected: Japan
• Date Leaked: August 26, 2018

Unknown Hash Format: Why "Other" Means Assume the Worst

The password hash type in the SOMECITY breach is listed as unknown format -- it doesn't match any of the standard identifiable patterns (MD5, SHA1, bcrypt, etc.). When a hash format is unidentifiable from the dataset, the conservative security posture is to treat the passwords as fully compromized. Unknown hash formats often turn out to be custom, poorly designed schemes with minimal actual protection, or extremely weak algorithms that have been cracked but not widely catalogued.

In practice, unknown-format hashes in older breaches frequently yield to modern cracking tools. Attackers with access to the dataset can run it against rainbow tables for common formats, attempt brute-force with GPU-accelerated hashcat, or simply wait for the format to be identified through crowd-sourced analysis in underground forums.

Niche Communities and Cross-Platform Risk

SOMECITY's user base -- urban streetball fans, athletes, and cultural enthusiasts in Japan -- represents a specific demografic with consistent interests and likely overlapping account presence across related platforms. Sports forums, streetwear communities, sneaker marketplaces, and Japanese-language social platforms would all attract a similar audience. When a credential from a niche breach like SOMECITY works on a related platform because the user reused their password, the attacker gains access to a richer target than the breach database alone would suggest.

This cross-platform risk is why niche breaches matter even when their record counts are modest. 10,723 accounts might seem small, but if a significant fraction of those users reused their SOMECITY password on other platforms, the effective reach of this breach extends far beyond the streetball league's own user base.

The August 26, 2018 Coordinated Batch

SOMECITY's breach data appeared on the same day as breaches from Talad-pra (Thailand, 9,174 records), Superwraps (USA, 11,331 records), supercars (Germany, 20,007 records), SuaraSurabaya (Indonesia, 29,889 records), and Spartan iTaB (USA, 22,386 records) -- all landing on August 26, 2018. This clustering strongly suggets a coordinated batch disclosure: an actor or group compiled breaches from multiple small platforms and released them simultaneously, maximizing the volume of exposed credentials entering circulation in a single event.

For users of any of these platforms, the simultaneous disclosure means their credentials entered the market as part of a well-organized collection, likely quickly incorporated into combolists used for automated credential stuffing across hundreds of services.

Check If Your Data Was Exposed

HEROIC's free breach scanner searches across more than 400 billion exposed records -- including the SOMECITY breach and thousands of other database leaks. Run a free scan to find out if your email address or password has appeared in any known breach.