Facebook Account Recovery Platform — 1,269 Users + 1,147 Plaintext Passwords 2026

[ottomanturk27]

About the leak

Firebase Firestore database left wide open on a Facebook account recovery/appeal platform. Users submit their real Facebook passwords, emails, phone numbers, and full identity to recover hacked accounts. Any script kiddie with a browser could've pulled this.
This is dump #1 of ~25 from testing a new mass Firebase scanning tool. Technique is not public — leverages a specific developer pipeline leak that nobody's talking about. Won't go into detail, but client-side JS bundles are a goldmine and I built something that scales it. More drops coming.


Date: 08-2026
Format: JSON
Users: 1,269
Passwords: 1,147 plaintext

Compromised Data Includes

personalEmail · businessEmail · password (plaintext) · confirmPassword (plaintext) · fullName · phone · pageName (Facebook page) · appeal (recovery reason) · currentStep · createdAt


Geographic Distribution
US (+1) — 878
UK (+44) — 193
NL (+31) — 11
NG (+234) — 3


Password Breakdown

· 418 — NameYear! format (Nora1965!, Kento1965!, Deon1994!)
· 40 — letters only (asdasdasd, ASDASDA)
· 14 — digits only (123123, 111111111)
· 3 reused across multiple users: asdasdasd (x8), 123123 (x4), asdasd (x2)
· 1,136 unique passwords total


Sample Data (5 records)

Code:
{ "fullName": "Alan Greenholt", "personalEmail": "abagail.kautzer@wls1.com", "businessEmail": "abagail.kautzer@wls1.com", "password": "Nora1965!", "confirmPassword": "Mariel1955", "phone": "7448541838", "pageName": "Alan Greenholt", "currentStep": "password", "createdAt": "2025-01-19T12:42:07.067Z" }

Code:
{ "fullName": "Justyn McDermott", "personalEmail": "abner59@mailrez.com", "businessEmail": "abner59@mailrez.com", "password": "Deon1994!", "confirmPassword": "Magnus1949", "phone": "7428846174", "pageName": "Justyn McDermott", "currentStep": "password", "createdAt": "2024-08-04T10:14:18.516Z" }

Code:
{ "fullName": "Elroy D'Amore", "personalEmail": "abner_buckridge40@orimi.co", "businessEmail": "abner_buckridge40@orimi.co", "password": "Vern1981", "confirmPassword": "Elnor1970!", "phone": "+13254002098", "pageName": "Elroy D'Amore", "currentStep": "password", "createdAt": "2024-06-08T19:26:16.392Z" }

Code:
{ "fullName": "Marvin Emard", "personalEmail": "adaline.schowalter@recodz.com", "businessEmail": "adaline.schowalter@recodz.com", "password": "Cicero2003", "confirmPassword": "Brando2004", "phone": "+447380307280", "pageName": "Marvin Emard", "currentStep": "password", "createdAt": "2025-02-19T13:00:55.189Z" }

Code:
{ "fullName": "Mabel Kreiger", "personalEmail": "ada.haley13@moneysquad.org", "businessEmail": "brandonfarmer75@outlook.com", "password": "Candid2016", "confirmPassword": "Desti1966!", "phone": "7833938358", "pageName": "Mabel Kreiger", "currentStep": "password", "createdAt": "2024-06-03T12:55:25.797Z" }




More drops from the pipeline soon.

DOWNLOAD
Hidden Content

Gofile - Cloud Storage Made Simple

Secure, fast and free cloud storage solution. Upload and share files instantly.

gofile.io