A major BreachForums Database leak linked to the cybercrime forum BreachForums has exposed details of nearly 324,000 user accounts.
The leak surfaced on January 9, 2026. It has raised serious concerns for cybercriminals who believed their identities were hidden.
The leaked data appeared on a website linked to the ShinyHunters hacking group.
Security experts say the information could help law enforcement track illegal online activity. BreachForums has long served as a marketplace for stolen data and hacking services.
BreachForums Database Leak: What Data Was Exposed
The leaked archive includes sensitive user information. This data may help identify people involved in cybercrime.
Leaked data includes:
- 323,986 user accounts
- Forum display names
- Email addresses
- Argon2i password hashes
- Account registration dates
- Public and local IP addresses
- Forum’s private PGP encryption key
Most IP addresses point to a local system. However, about 70,296 records contain real public IP addresses. These could reveal user locations.
The database shows the last user registration on August 11, 2025. This matches the date when the previous BreachForums domain was shut down by authorities.
The leak also includes:
- A MyBB forum users table
- A private PGP key created in July 2023
- A long manifesto signed by a person calling himself “James”
Also read about: Ledger Data Breach Linked to Global-e, Customer Info Exposed
Admin Response and Forum History
A BreachForums administrator, known as “N/A,” confirmed the data leak. The admin said the files came from August 2025. According to the statement, the data was briefly stored in an unsecured folder during forum restoration.
Administrator claims:
- No active server breach occurred
- No database hacking took place
- Data was downloaded only once
- Current systems remain secure
Security researchers disagree. They say even old data can expose threat actors. IP addresses and emails may still link users to real identities.
BreachForums has a troubled past. It replaced RaidForums in 2022 after an FBI seizure. Since then, it has faced repeated shutdowns.
Key events:
- 2023: Founder arrested and sentenced
- 2024: FBI seized the forum again
- 2025: Four admins arrested in France
- 2025: Domain seized after extortion activity
Despite this, the forum keeps returning. Some users now fear it may be a law enforcement trap.
Why this matters
This BreachForums data leak shows that even cybercrime platforms are not safe. Anonymity online is never guaranteed.
More News To Read: