3D Printing Community Exposed: The Thingiverse Breach Leaked 2.28 Million Records

HEROIC analysts confirmed the Thingiverse breach in October 2020, finding that 2,284,840 records from the popular 3D model sharing platform were exposed. The leaked data included email addresses, password hashes, usernames, first names, last names, and IP addresses, making this one of the larger community platform breaches to impact the maker and design community. The breach is partcularly relevant because the data came from a stolen database backup.

How IP Addresses and Password Hashes From Thingiverse Enable Targeted Attacks

Having both an IP address and a cracked password hash for the same user allows attackers to associate online activity with a real network location. For users in manufacturing, industrial design, or product development, this creates a risk of corporate espionage or targeted intrusion. The SHA1 hashes in the dataset are relatively weak and can be reversed quickly, while bcrypt hashes take longer but are not immune to cracking with sufficient resources. Credentials that occured in this breach may still be in active use across other platforms.

What Was Exposed in the Thingiverse Breach

• Email Address
• Password Hash
• Username
• First Name
• Last Name
• IP Address

Why the Thingiverse Breach Matters to Makers, Designers, and Engineers

Thingiverse is heavily used by professionals in product development and engineering, not just hobbyists. A breach exposing full names, email addresses, and IP addresses alongside cracked password hashes could give competitors or bad actors seperate pathways into corporate networks when those same credentials are reused on work systems. For enterprise security teams, this breach is a signal to check whether employee emails appear in the Thingiverse dataset.

How Database Breaches Work

A database breach occurs when attackers gain unauthorized access to a platform's stored data, often by exploiting unpatched vulnerabilities, stealing administrative credentials, or accessing improperly secured backup files. In the Thingiverse case, the attackers obtained a full database backup, which contained a complete snapshot of user records. These backups are particularly dangerous because they are often stored with weaker security controls than the live database.

Check If Your Data Was Exposed

HEROIC's free breach scanner searches more than 400 billion leaked records, including data from the Thingiverse breach, to instantly tell you if your email address was part of this or any other known incident. Run a free scan at HEROIC and protect your accounts.