Wellness Directory Bio et Bien-Etre Leaks 15,662 Passwords

HEROIC analysts identified a data breach tied to Bio et Bien-Etre, a French directory site focused on organic and sustainable living, first leaked on August 26, 2018. The exposed dataset contains 15,662 records, including email addresses paired with a mix of plaintext passwords and MD5 password hashes. The data was shared on a hacking forum, putting it within easy reach of anyone looking to build attack lists.

Why This Is Dangerous

This leak is especially risky because it contains two forms of exposed passwords. Some accounts had their passwords stored in plaintext, meaning the password is visible exactly as the user typed it, no cracking needed. Others were stored as MD5 hashes, an outdated method that modern tools can break in a short amount of time. Either way, an attacker ends up with a working email and password pair that can be tried on other websites.

What Was Exposed

• Email addresses
• Plaintext passwords
• Password hashes (MD5 format)

Why This Matters

Wellness and lifestyle sites like this one may not seem like high-value targets, but the credentials people use to sign up are often the same ones they use for email, banking, or shopping accounts. Attackers take leaked email and password combinations like these and run them against other popular services in bulk, a method known as credential stuffing. Every match found this way can lead to account takeover, identity theft, or financial fraud.

How This Database Breach Became a Combolist

This incident is classified as both a database breach and a combolist. It started when attackers gained unauthorized access to Bio et Bien-Etre's stored user records and extracted them directly, the defining feature of a database breach. The stolen email and password pairs were then organized into a combolist, a simplified list format designed for automated login attempts against other sites. Once a combolist like this reaches a hacking forum, it can be copied, traded, and reused for years.

Check If You Are Affected

If you ever created an account with Bio et Bien-Etre or have reused passwords across different sites, it is worth checking whether your details appear in this leak. HEROIC's free breach scanner searches a database of more than 400 billion leaked records, so you can find out where your information has been exposed and change your passwords before someone else does.