Infamous BreachForums forum breached, spilling data on 325K users

BreachForums, the serially resurrected cybercrime marketplace, has tripped over itself after a data breach spilled details tied to about 324,000 user accounts.

The latest incarnation of the notorious hacking forum was burgled in August 2025, exposing email addresses, usernames, and hashed passwords, according to Have I Been Pwned, which added the incident to its database on January 10.

The allegedly stolen user data was later posted to shinyhunte[.]rs, alongside a message from a self-described cyber outlaw calling himself "James," who appeared keen to make sure his handiwork didn't go unnoticed.

Have I Been Pwned's listing of the incident shows that the breach occurred before law enforcement's October 2025 takedown of the BreachForums domain, and that the leak comprised roughly 324,000 unique email addresses, usernames, and Argon2-hashed passwords, pulled from public posts, private messages, and other forum records.

According to Resecurity's analysis of the ...