The StoreLP Breach Exposed More Accounts Than Dallas Has Residents

HEROIC analysts flagged the StoreLP breach after noticing active discussions on underground forums about cracking credentials from a defunct Russian e-commerce platform. In March 2018, StoreLP, a Russian-language online store that sold classical music tracks at storelp.ru, suffered a database breach that exposed 1,435,369 user records. The compromised data included email addresses and MD5 password hashes. While hashed passwords sound safer than plaintext, MD5 is an outdated and deeply insecure hashing method that attackers can crack at extremely high speeds, making this dataset partcularly dangerous in the wrong hands.

Why MD5 Password Hashes Are Almost as Dangerous as Plaintext

MD5 was once used widely for storing passwords, but security experts stopped recommending it years ago because modern computers can test billions of MD5 guesses per second. When attackers get a database full of MD5 hashes, they run them through pre-computed tables called rainbow tables, or simply brute-force them, recovering the original passwords in hours or even minutes. Once cracked, those email and password pairs are used in credential stuffing campaigns against banking, email, and shopping accounts. The 1.4 million records in this StoreLP dump give criminals a substantial supply of potentially valid credentials to work through.

What Was Exposed in the StoreLP Breach

• Email Address
• Password Hash (MD5)

Why a Russian E-Commerce Breach Affects Users Worldwide

Many users of international or foreign-language platforms register with the same email address and password they use everywhere else. StoreLP attracted classical music enthusiasts from multiple countries, meaning the exposed email addresses span well beyond Russia. Criminals who crack these MD5 hashes gain a global list of potential victims. These credentials are then tested against popular Western services, where account takeover, identity theft, and financial fraud can occured even years after the original breach.

How a Database Breach Works

A database breach happens when an attacker gains unauthorized access to the server or system that stores a website's user information. This can be done by exploiting known software vulnerabilities, using phishing to steal administrator credentials, or injecting malicious queries directly into the database. Once inside, the attacker downloads the user table, which typically includes email addresses, password hashes, and any other details users provided when registering. In StoreLP's case, the use of MD5 hashing meant the stolen data had very little resistance against modern password-cracking techniques.

Check If Your Data Was Exposed

HEROIC's free breach scanner searches across more than 400 billion exposed records to tell you whether your email address or password has appeared in a known data breach. If you ever registered on StoreLP or any other platform using the same credentials, run a free scan now and take steps to protect your accounts before attackers do it for you.