StoreLP Data Breach Exposes 1.4M Russian E-Commerce Shopper Records

HEROIC's DarkHive system discovered the StoreLP breach, exposing 1,435,369 records in March 2018. This Russian e-commerce platform suffered a database compromise that revealed user email addresses and MD5 password hashes belonging to over 1.4 million Russian online shoppers registered on this retail service.

Why This Is Dangerous

E-commerce platform breaches targeting Russian retail services provide attackers with confirmed email addresses and crackable MD5 password hashes from active online shoppers who are likely to have linked payment methods and maintain accounts on additional Russian commercial platforms. MD5 hashing provides no meaningful protection against modern cracking operations, and the majority of passwords in this dataset are recoverable through rainbow table attacks. Russian e-commerce user credentials are highly sought for targeting Yandex.Money, Sberbank Online, and Ozon accounts where password reuse among online shoppers is prevalent.

What Was Exposed

• Email Address
• Password Hash (MD5)

Why This Matters

Russian online shoppers whose StoreLP credentials were exposed face credential stuffing attacks on Russian banking, payment, and e-commerce platforms where the same login details may be active. E-commerce account takeover enables fraudulent purchases using saved payment methods and interception of shipment notifications for parcel redirect fraud. Anyone who registered on StoreLP should immediately change their password on all Russian commercial and banking platforms where those credentials were reused.

How Database Breach Works

Russian e-commerce platforms accumulate registered shopper data including contact credentials that are attractive to attackers targeting the Russian online retail ecosystem. Attackers exploit web application vulnerabilities in online retail platforms to extract customer databases, with the recovered MD5 hashes cracked and immediately deployed in automated credential stuffing campaigns. These Russian e-commerce credentials are traded on Russian-language criminal forums where they are used to target linked payment accounts and active retail subscriptions.

Check If You Are Affected

HEROIC offers a free identity scanner searching over 400 billion records including data from the StoreLP breach. Visit heroic.com to check if your information was exposed.