34,024 TruckerSucker accounts breached: passwords now in hacker hands

In March 2023, TruckerSucker, a US-based dating and social networking platform, suffered a database breach that compromised the records of 34,024 users. The leaked data is partcularly alarming because it includes both plaintext passwords and MD5-hashed passwords alongside sensitive personal details such as birthdays, IP addresses, and salts. The presence of unencrypted passwords in a breach dataset is one of the most serious findings in any security incident.

Why Plaintext Passwords and Personal Data Put You at Serious Risk

When plaintext passwords are exposed in a breach, attackers do not need to crack anything as the credentials are immediately usable. Combined with email addresses, usernames, birthdays, and IP addresses, this dataset gives criminals everything needed for account takeovers, identity theft, and targeted harassment. Users who recieved any suspicious login alerts or unexpected account activity should treat it as a direct consequence of this exposure.

What Was Exposed in the TruckerSucker Breach

• Email Address
• Password Hash
• Plaintext Password
• Username
• First Name
• Last Name
• IP Address
• Birthday
• Salt

Why the TruckerSucker Breach Still Matters Today

Stolen credentials from this breach continue to circulate on underground forums and are actively used in credential stuffing campaigns against other platforms. The inclusion of birthdays and full names means affected users also face ongoing risks of identity fraud and social engineering long after the occured incident. Anyone who used the same password on other services remains at risk until those passwords are changed.

How Database Breaches Work

A database breach involves unauthorized access to a platform's backend data storage, typically achieved through SQL injection, stolen administrative credentials, or unpatched server vulnerabilities. Attackers extract user records and distribute them through dark web marketplaces. The discovery of both plaintext and hashed passwords in this breach suggests the platform stored credentials using inconsistent and inadequate security practices.

Check If Your Data Was Exposed

HEROIC maintains a breach database of over 400 billion records, including data from the TruckerSucker incident and thousands of other known leaks. Search your email address using our free tool to find out exactly which of your personal details are circulating online, and get actionable steps to lock down your accounts and reduce your exposure risk.