On June 17, 2023, Have I Been Pwned added a new entry for the BreachForums Clone data breach, confirming that more than 4,000 user records from a revived version of the notorious hacking forum had been exposed through an unsecured database backup.
Named in this incident?
You can’t unleak data. You can take away what it’s worth.
A leaked record is where it starts, not where it ends. What turns it into your front door is the look-up sites publishing your address beside your name — and those are what an AI reads when somebody asks about you. The free scan shows you both. We write to 582 companies.
See what is exposed about you — free scan →Not ready yet? Run a free breach check on this email
We’ll check it against 13.1B+ leaked records right now — no account needed. Continuous monitoring & alerts are part of Protection.
Primary Disclosure Details
The listing states that the breach occurred because an exposed backup of the MyBB forum database was obtained by an unknown party. It explicitly lists the compromised data types as email addresses, IP addresses, usernames, and Argon2 password hashes. The disclosure does not specify the exact date the backup was taken or the identity of the party that first obtained it, only that the records surfaced publicly in mid-June 2023. No ransom demand or extortion attempt is mentioned; this appears to be a straightforward database leak rather than a ransomware event.
Why This Matters for You and Your Family
If you ever registered an account on the BreachForums clone, your email address, username, IP address, and the password hash protecting your account are now circulating among people who specialize in credential trading and targeted attacks. Even though the passwords were stored as Argon2 hashes, which are relatively resistant to cracking, many users reuse the same password across multiple services. A single cracked or guessed password can unlock email accounts, banking portals, or social media profiles that contain far more sensitive information about you and your household. Children or teenagers who used a family email to create forum accounts may also be exposed, creating long-term risks that extend beyond the original user.
Doxxing and Identity-Chain Risks
Forum leaks like this one frequently become the starting point for doxxing chains. An attacker who obtains your username and email can cross-reference them with gaming platforms, Discord servers, or social media accounts that share the same handle. Combined with the exposed IP address, this information can narrow down your approximate location and link your online personas to your real-world identity. Once that chain is built, it becomes easier to harass family members, stalk children through linked gaming accounts, or launch social-engineering attacks that reference personal details pulled from the breach. These connections often surface months or years later when the data is sold in batches on other underground markets.