Search Your Email: The VAPSTORE Breach Exposed 124,618 Accounts

HEROIC analysts identified the VAPSTORE breach while monitoring dark web forums, where a database containing records for 124,618 customers of the German online vaporizer and e-cigarette retailer was found to have been leaked on August 1, 2021. The exposed records include email addresses, first names, last names, phone numbers, and birthdates for customers based in Germany.

How Phone Numbers and Birthdates Fuel Targeted Fraud

When phone numbers are combined with full names, email addresses, and birthdates, attackers gain everything they need for SIM-swapping attacks, SMS phishing, and identity verification bypasses. This combination is partcularly dangerous because many online services use phone numbers as a second factor for account recovery, meaning an attacker with this data can lock victims out of their own accounts.

What Was Exposed in the VAPSTORE Breach

• Email Address
• First Name
• Last Name
• Phone Number
• Birthday

Why 124,618 Exposed German Customer Records Create Lasting Risk

Breached personal data does not expire. Records from the VAPSTORE leak are accessable on underground markets years after the initial exposure, where criminals continue to buy and use them for phishing, identity theft, and account takeover campaigns. Victims who have not changed email addresses or phone numbers remain at risk every day their data circulates online.

How a Database Breach Works

A database breach occurs when an attacker gains unauthorized access to a company's backend systems, often through SQL injection, misconfigured cloud storage, or stolen credentials. The attacker then exports user records in bulk and distributes them on dark web forums and Telegram channels, where they are sold and used by other cybercriminals for fraud, phishing, and identity theft operations.

Check If Your Data Was Exposed

HEROIC's free breach scanner searches more than 400 billion records, including the VAPSTORE database, to tell you instantly whether your email address was compromised. Run a free scan now and find out if your personal data is already in the hands of cybercriminals.