Hacker Database Breach Exposes 324,000 User Accounts

Key Takeaways

1. BreachForums experienced a significant data breach, exposing nearly 324,000 user accounts.
2. The leaked SQL file contains sensitive data, including usernames and over 70,000 public IP addresses.
3. The hackers responsible, ShinyHunters, suggested that BreachForums may be a “honeypot” set up by law enforcement.
4. The compromised files were stored in an unsecured folder during a transition to a new domain.
5. BreachForums functions as a marketplace for hackers to buy and sell hacking tools and stolen information.

Irony, thy name is hacking.

BreachForums, a well-known site where hackers share leaked and stolen information, recently experienced a breach of its own, leading to the exposure of nearly 324,000 user accounts. As reported by Bleeping Computer, an archive that includes an SQL file, a text file, and a PGP key file appeared on a “website named after the ShinyHunters extortion gang.”

SQL File Revelations

The highlight of this archive is the SQL file, which holds various data points such as usernames, IP addresses, and registration dates, among other details. While most of the IP addresses listed are simple loopback addresses, there are also 70,296 public IP addresses that could potentially be used to identify the users linked to those accounts, as indicated by Bleeping Computer.

No Honor Among Thieves

Adding to the saying that there’s no honor among thieves, the hackers responsible for this breach (ShinyHunters) claimed that BreachForums is actually a “honeypot,” suggesting that it is a fake site set up by law enforcement to catch unsuspecting cybercriminals.

The administrator of BreachForums mentioned that the compromised files were kept in “an unsecured folder” during the forum’s transition from its previous domain to the current one. It’s important to point out that this isn’t the first occasion BreachForums has faced a data breach.

Marketplace for Malicious Activity

BreachForums serves as a platform where hackers and other malicious individuals can buy and sell hacking tools and stolen information. Law enforcement took control of the site on August 11, 2025, leading to its shutdown. It has since moved to its new domain.

Bleeping Computer

Source:
Link