Taylors Supplies (Haberdashery)

We noticed a concerning data exposure originating from Taylors Supplies, a long-standing haberdashery business based in Manchester. The incident, which surfaced in August 2018, involved the dissemination of user credentials across a prominent hacking forum. What struck us was the inclusion of plaintext passwords, a particularly egregious security lapse that significantly elevates the risk to affected individuals. The scale, while not astronomical, is substantial enough to warrant immediate attention, especially given the nature of the compromised data.

The breach, identified on August 26, 2018, appears to stem from a database compromise at Taylors Supplies. This incident resulted in the exposure of 15,899 records, comprising both email addresses and, critically, plaintext passwords. The data's structure suggests a direct extraction from a customer or user database, likely used for account management or order processing. The immediate implication is the high likelihood of credential stuffing attacks against other services where these users may have reused their passwords. The presence of plaintext passwords points to a fundamental flaw in data storage and handling practices, moving beyond mere accidental disclosure to a systemic vulnerability.

While this specific incident involving Taylors Supplies did not generate widespread mainstream news coverage at the time, it aligns with a broader trend of retail and small-to-medium enterprise (SME) data breaches that were prevalent in 2018. Such exposures often contribute to larger credential stuffing lists that are then leveraged by threat actors for more sophisticated attacks across the internet. Research from cybersecurity firms during that period consistently highlighted the prevalence of weak password storage and the persistent use of plaintext credentials in many compromised databases, underscoring the ongoing threat posed by these fundamental security oversights.