Zweispace Means Someone Could Be Logging Into Your Accounts Right Now

HEROIC analysts flagged the Zweispace (Hudosantouki) breach during a routine sweep of newly surfaced credential datasets in early 2024. The data, confirmed leaked on January 1, 2024, came from a database belonging to Zweispace, a Japanese business directory platform operating at hudosantouki.net. While the number of affected accounts is relatively small at 95 users, the presence of hashed passwords makes this exposure significantly more serious than the record count alone suggests.

Why This Is Dangerous

This breach exposed password hashes, meaning attackers now have a direct path to recovering your actual password. The pHPass hashing algorithm used here is considered outdated and relatively weak by modern standards. Cracking tools can process thousands of pHPass hashes per second, meaning weak or common passwords can be recovered within minutes. Once a password is cracked, attackers test it across Gmail, banking apps, and social media accounts, looking for reuse. For a business directory platform, many users are likely small business owners whose professional accounts could also be at risk.

What Was Exposed

• Email Address
• Username
• Password Hash

Why This Matters

Password hash leaks are a direct gateway to account takeover. When criminals crack your hash and recover your password, they can log into any account where you used that same password. This is called credential stuffing, and it is one of the most common attack methods in use today. Even if Zweispace itself is a small platform, the passwords people use there are often the same ones protecting their email inboxes, online banking, and work systems. The risk spreads far beyond the original breach. Identity theft and finantial fraud often follow within weeks of a credential exposure like this.

How a Database Breach Works

A database breach happens when an attacker finds a way into the server storing a website's user data. Common methods include exploiting outdated software, guessing weak admin passwords, or using SQL injection to pull data directly from login and search forms. Once the attacker has access, they can copy the entire user database, including all stored account details, in a matter of minutes. That data is then traded in private cybercriminal communities, often showing up in Telegram groups or dark web forums shortly after the initial compromise.

Check If You Are Affected

HEROIC's free scanner checks your email against more than 400 billion exposed records, including this Zweispace breach. See instantly whether your credentials have been compromised and get clear guidance on what to do next.

Scan your email now at heroic.com/scan