Sons of Liberty Tees

We noticed a recent resurgence of interest in a dataset originating from a 2019 incident involving Sons of Liberty Tees, a now-defunct e-commerce retailer. The initial leak, discovered on March 20, 2019, exposed a significant number of user credentials. What struck us was the continued availability and potential repurposing of this older, yet still sensitive, information on prominent hacking forums. The nature of the exposed data, particularly the inclusion of plaintext passwords, elevates the risk profile of this seemingly historical breach.

The Sons of Liberty Tees breach, affecting 87,929 users, was characterized by the exposure of email addresses and plaintext passwords. This data was reportedly exfiltrated through a database compromise, leading to its subsequent inclusion in a combolist. The direct accessibility of credentials in plaintext format is a critical vulnerability, as it bypasses the need for brute-force attacks or credential stuffing against other services where users may have reused the same credentials. The source structure points to a direct database dump, suggesting a lack of robust security controls around sensitive user data storage.

While specific news coverage for this particular Sons of Liberty Tees breach from 2019 is limited, the general phenomenon of e-commerce data breaches and the subsequent sale and reuse of compromised credentials are well-documented. Security researchers have consistently highlighted the dangers of plaintext password storage, with numerous reports detailing how such vulnerabilities are exploited in large-scale credential stuffing attacks. The ongoing presence of such datasets on illicit marketplaces underscores the persistent threat posed by historical breaches, even from defunct entities.