SKTM Breach Exposed 4,145 Indian Jewelry Shoppers’ Data

In August 2018, HEROIC identified 4,145 records from Sree Kumaran Thangamaligai (SKTM), an Indian e-commerce platform specializing in high-end jewelry. The data surfaced on a prominent hacking forum and contained email addresses and MD5 password hashes belonging to SKTM customers.

Why the Sree Kumaran Thangamaligai (SKTM) Breach Is Dangerous

Attackers with access to e-commerce customer credentials can attempt to hijack accounts, access saved payment methods, make fraudulent purchases, and use cracked passwords across banking and email accounts. Customers of high-value retail platforms are frequent targets for financial fraud and identity theft.

What Was Exposed in the Sree Kumaran Thangamaligai (SKTM) Leak

• Email addresses
• MD5 password hashes

Why This Sree Kumaran Thangamaligai (SKTM) Data Puts You at Risk

MD5 password hashes offer minimal protection and can be reversed with rainbow tables or brute-force attacks. Once attackers recover plaintext credentials, they run credential stuffing attacks against banking, email, and shopping platforms, turning a single breach into account takeovers across multiple services and exposing users to financial fraud and identity theft.

How Database Breaches Work

In a database breach, attackers exploit security weaknesses in a website or application to extract stored user records. The stolen data is compiled into combolists and distributed on hacking forums. In the SKTM case, the credentials were shared on a prominent underground forum, making them available to threat actors who use such datasets for large-scale credential stuffing and account compromise campaigns.

Check If Your Data Was Exposed

HEROIC operates one of the world's largest breach databases, covering more than 400 billion leaked records. Use HEROIC's free breach scanner to check if your email address or credentials appeared in the Sree Kumaran Thangamaligai (SKTM) leak or thousands of other breaches in our database.