The Vads Breach Gave Attackers 14,157 Passwords to Test Elsewhere

HEROIC analysts identified a resurfaced 2016 database breach tied to Vads, a UK-based visual arts data archive, exposing 14,157 accounts. The breach originally occurred on March 30, 2016. The exact fields exposed were not itemized in the original leak record, but the passwords involved were stored using a mix of MD5 hashing, associated with WordPress installations, and plaintext, meaning some passwords had no protection at all.

Why the Vads Breach Is Dangerous

A mix of MD5 and plaintext password storage means at least some of the 14,157 accounts in this breach had their actual passwords exposed with zero protection, while others relied on a hashing method that's been considered weak for over a decade. Either way, attackers can recover a usable password for a large share of these accounts without much effort. That's dangerous for anyone who reused that password anywhere else.

What We Know Was Exposed

• User account records tied to the Vads platform
• Passwords stored via MD5 hashing (WordPress installations)
• Passwords stored in plaintext for other accounts

Why This Breach Matters

Even when a breach involves an obscure or niche website, the accounts inside it belong to real people who often reuse the same password across multiple services. If someone in this dataset used their Vads password on a personal email account or another site, that account is exposed to credential stuffing right now. The age of this breach doesn't reduce the risk. If the data hasn't been acted on yet, it can still be used today.

How This Database Breach Happened

This incident is classified as a database breach, meaning an attacker accessed the site's backend records directly, likely through a vulnerability in the platform's software. The presence of both MD5 hashed and plaintext passwords in the same dataset suggests the site's password storage practices changed or were inconsistent over time, which is common for older websites that were never fully modernized. Once a database like this is stolen, it tends to resurface repeatedly on breach forums for years.

Check If You Are Affected

If you ever created an account on Vads, it's worth confirming whether your information is part of this breach. HEROIC's free breach scanner checks your email against more than 400 billion leaked records, including this one, so you can find out immediately and update any passwords that need it.