Your Password May Be Cracked: SweClockers Leak Hit 254,505 Users

HEROIC analysts identified a 2015 breach of SweClockers.com, the Swedish technology news site, that exposed 254,505 accounts. The leaked data includes email addresses, usernames, salt values, and passwords hashed using a combination of MD5 and other methods.

Why the SweClockers Leak Is Dangerous

Salting passwords before hashing is a good security practice, but it is not a guarantee of safety on its own, especially when MD5 is part of the mix. MD5 remains fast to crack even when salted, and with a decade having passed since this breach, a meaningful share of these passwords have likely already been recovered by attackers.

What Was Exposed in the SweClockers Breach

• Email addresses
• Usernames
• Password salt values
• Password hashes (MD5 and other)

Why This Matters

A quarter million accounts is a large enough pool that cracked passwords from this breach are almost certainly being tested against other services right now through credential stuffing. If you had a SweClockers account and reused that password anywhere else, particularly on email or other frequently used accounts, that account is at risk.

How This Database Breach Happened

This incident is classified as a database breach, meaning attackers extracted user records directly from SweClockers' systems. The mix of hashing methods found in the data suggests the site may have been in the middle of upgrading its security when the breach occurred, a common scenario that can leave older, weaker password hashes still in use alongside newer ones.

Check If You Are Affected

If you have ever had an account on SweClockers, it is worth checking whether your details were part of this leak. HEROIC's free breach scanner searches over 400 billion leaked records, including this breach, so you can see your exposure right away.