WorldShop Data Breach Exposes 73K Lufthansa Loyalty Shopper Credentials

HEROIC's DarkHive system discovered the WorldShop breach, exposing 73,698 records in August 2018. This German shopping portal, which operated as the Lufthansa Miles and More online store, suffered a database compromise that revealed customer email addresses and plaintext passwords belonging to airline loyalty program shoppers across Germany and Europe.

Why This Is Dangerous

Plaintext password storage represents one of the most severe security failures a database operator can commit, as it means any attacker who accesses the database obtains immediately usable credentials without any cracking effort required. Users who registered on this Lufthansa affiliated shopping portal likely used travel-related email addresses and passwords that may have been reused across airline booking, loyalty program, and travel accounts. The combination of an airline loyalty context and plaintext passwords makes this breach especially attractive for attackers targeting frequent travelers.

What Was Exposed

• Email Address
• Plaintext Password

Why This Matters

Frequent flyers whose credentials were exposed face targeted fraud attempts focused on loyalty point theft, a growing and costly form of travel industry fraud. Attackers can use the exposed email and password combinations to attempt immediate logins on airline websites, hotel platforms, and other travel services where the same credentials may have been reused. Anyone who shopped through this portal should immediately change passwords on any account where the same password was used, particularly travel and loyalty program accounts.

How Database Breach Works

Retail and loyalty shopping portals handle payment and membership data, making them attractive targets for database attacks. Attackers exploit SQL injection vulnerabilities, inadequate access controls, or compromised hosting environments to extract customer records. The presence of plaintext passwords in this breach indicates the platform failed to implement even basic security hygiene, which dramatically amplifies the impact for affected users whose credentials can be tested immediately across other services.

Check If You Are Affected

HEROIC offers a free identity scanner searching over 400 billion records including data from the WorldShop breach. Visit heroic.com to check if your information was exposed.