Tastycat

We've been tracking a resurgence of older breach datasets appearing in aggregated credential stuffing lists. While these breaches are often years old, the reuse of credentials means they can still pose a significant risk. What struck us about a recent discovery wasn't the size of the leak, but its age and the specific demographic it targeted. The data, originating from a site called **Tastycat**, had been circulating quietly for years before resurfacing recently on several dark web forums. This highlights the long tail of risk associated with older breaches and the continued need for vigilance.

The Decade-Old Dating Site Leak Fueling Credential Stuffing Attacks

A breach of the now-defunct dating site **Tastycat**, dating back to **December 31, 2014**, has resurfaced, exposing the credentials of **97,527** users. While the breach itself is not new, its reappearance in aggregated credential stuffing lists makes it relevant to enterprises today. The data dump includes a mix of personal information and login details, creating a potential pathway for account takeovers across various platforms.

The breach first came to our attention when we observed a spike in mentions of "tastycat" within several dark web marketplaces known for trading compromised credentials. The data's age initially made it seem less significant, but the completeness of the data and the cleartext storage of some passwords raised immediate concerns. The leak's reappearance highlights the enduring threat posed by even older breaches when users reuse passwords across multiple services.

This matters to enterprises because it demonstrates the ongoing need for robust password security policies and user education. Even if an organization's systems haven't been directly compromised, employees may be vulnerable if they used the same credentials on **Tastycat** that they use for work-related accounts. This emphasizes the importance of monitoring for credential reuse and implementing multi-factor authentication wherever possible.

• Total records exposed: 97,527
• Types of data included: First Name, Last Name, Email Address, Username, Passwords (some stored in cleartext)
• Sensitive content types: PII (Personally Identifiable Information)
• Source structure: Database dump
• Leak location(s): Dark web forums, Telegram channels, Breach Forums
• Date of first appearance: December 31, 2014 (resurfaced recently)

The reappearance of the **Tastycat** breach aligns with a broader trend of older data breaches being weaponized in automated attacks. As reported by HaveIBeenPwned, older breaches often resurface in credential stuffing lists, posing a continued risk to users and organizations alike. The fact that some passwords were stored in cleartext underscores the security shortcomings of the platform at the time of the breach and the lasting consequences of such failures.