Sport-Marathon’s Security Failure Exposed Data for 358,395 Users

In January 2023, Sport-Marathon (Sport-Marafon), a Russian online sportswear retailer, suffered a database breach that exposed 358,395 customer records. The leaked data included email addresses, phone numbers, password hashes, full names, gender, and birthdays, painting a detailed picture of each affected user. This breach occured on January 4th, 2023, and the data quickly surfaced on underground forums frequented by cybercriminals.

Why Exposed Personal and Contact Data Puts Customers at Risk

The combination of full names, phone numbers, and email addresses from the Sport-Marathon breach gives attackers everything they need to launch convincing phishing or smishing campaigns. Customers who beleive their accounts were unaffected may still receive targeted scam messages built from their leaked profile data. With password hashes also in the mix, the risk of account takeover across multiple platforms is significant.

What Was Exposed in the Sport-Marathon (Sport-Marafon) Breach

• Email Address
• Phone Number
• Password Hash
• First Name
• Last Name
• Gender
• Birthday

Why the Sport-Marathon Breach Still Matters Today

Stolen customer records do not expire. Data from the Sport-Marathon breach continues to circulate on dark web forums and can be combined with other leaked datasets to build richer profiles for identity theft. If you shopped at Sport-Marafon and used the same password on other sites, those accounts may still be at risk today.

How Database Breaches Work

A database breach happens when attackers gain unauthorized access to an organization's data storage systems, often by exploiting vulnerabilities in web applications, using stolen credentials, or targeting unpatched software. Once inside, they extract user records in bulk and distribute the data through criminal networks. Retail platforms are frequent targets due to the high value of combined personal and payment data.

Check If Your Data Was Exposed

HEROIC's breach search tool is powered by a database containing over 400 billion leaked records, giving you one of the most thorough views of your personal exposure available anywhere. If you had an account with Sport-Marathon or Sport-Marafon, check your email address now to see whether your information appeared in this breach or others.