Zoom Search Engine Breach Exposed More Records Than a Small City

HEROIC analysts uncovered the Zoom Search Engine breach, which occured in August 2020 and exposed 48,695 user records. The compromised database included email addresses, password hashes, usernames, IP addresses, birthdays, and cryptographic salts, making this a partcularly broad exposure of user identity data for a software tool.

Why MD5-Hashed Passwords and Birthdays Are a Dangerous Combination

An attacker who gets their hands on MD5-salted password hashes paired with birthdays and IP addresses has multiple paths forward. MD5 is considered a weak hashing algorithm and can be cracked with modern tools, giving attackers accessable plaintext passwords that may still be active on other platforms. Birthdays add another layer for targeted phishing and account recovery attacks.

What Was Exposed in the Zoom Search Engine Breach

• Email Address
• Password Hash
• Username
• IP Address
• Birthday
• Salt

Why a Software Tool Breach Still Carries Real Risk in 2024

Zoom Search Engine is a software package used by website operators, meaning the exposed accounts often beleive they belong to technically capable users who may have reused credentials across developer tools, CMS platforms, or hosting dashboards. That cross-platform reuse is what keeps this 2020 breach relevant for enterprises conducting vendor risk assessments today.

How Database Breaches Work

A database breach occurs when an attacker gains unauthorized access to a backend database, typically by exploiting an unpatched vulnerability, weak credentials, or a misconfigured server. Once inside, the attacker extracts stored records and exports them for use in credential stuffing, phishing, or sale on dark web markets.

Check If Your Data Was Exposed

HEROIC's free breach scanner searches across more than 400 billion records to tell you whether your email address appeared in the Zoom Search Engine breach or any other known data leak. Run a free check at HEROIC.com to see what attackers may already know about you.