{"id":9782,"date":"2026-01-10T10:03:46","date_gmt":"2026-01-10T10:03:46","guid":{"rendered":"https:\/\/serisec.com\/index.php\/2026\/01\/10\/breachforums-hack-hackers-expose-all-user-records-from-popular-dark-web-forum\/"},"modified":"2026-01-10T10:03:46","modified_gmt":"2026-01-10T10:03:46","slug":"breachforums-hack-hackers-expose-all-user-records-from-popular-dark-web-forum","status":"publish","type":"post","link":"https:\/\/serisec.com\/index.php\/2026\/01\/10\/breachforums-hack-hackers-expose-all-user-records-from-popular-dark-web-forum\/","title":{"rendered":"BreachForums Hack: Hackers Expose All User Records from Popular Dark Web Forum"},"content":{"rendered":"

BreachForums Hack: Hackers Expose All User Records from Popular Dark Web Forum
\n \t

\n
<\/BR>
\n
\n \t

\n
<\/BR><\/p>\n

\n

In a dramatic turn for the cybercrime underworld, a mysterious hacker known as \u201cJames\u201d has leaked the complete user database of BreachForums, a notorious Dark Web forum serving as a hub for stolen data trading and hacking discussions.<\/p>\n

The breach, announced on January 9, 2026, via the site shinyhunte.rs<\/em>, exposes metadata for over 323,986 users, including admins, moderators, and regular members, potentially dooming many to law enforcement scrutiny.<\/p>\n

This incident underscores the irony of cybercriminals falling victim to their own vulnerabilities.paste.txt\u200b<\/p>\n

BreachForums Data Breach<\/strong><\/h2>\n

BreachForums emerged in 2022 as the successor to RaidForums, which U.S. authorities seized amid investigations into data trafficking.<\/p>\n

The forum, powered by MyBB software<\/a>, facilitated sales of breached datasets, hacking tools, and illicit services, often hosted via DDoS-Guard and Tor mirrors despite repeated takedowns.<\/p>\n

Key disruptions included the 2023 arrest of founder Conor Fitzpatrick, who received a 20-year supervised release sentence, and a 2024 domain seizure swiftly reclaimed by operators ShinyHunters<\/a>.<\/p>\n

ShinyHunters, linked to groups like Scattered LAPSUS Hunters, relaunched the site multiple times, surviving French arrests in June 2025 and FBI seizures of extortion portals. The forum\u2019s resilience relied on frequent domain switches and Dark Web presence, but underlying MyBB flaws proved fatal.<\/p>\n

The dumped MySQL database, from table \u201chcclmafd2jnkwmfufmybbusers,\u201d reveals usernames, hashed passwords (Argon2), emails, IP addresses, registration dates, and PGP keys for high-profile accounts like ShinyHunters, Hollow, and IntelBroker.<\/p>\n

Analysis shows admins (4), super moderators (3), and mods (6), with user origins spanning the U.S. (largest share), Germany, Netherlands, France, Turkey, UK, and MENA regions like Morocco and Egypt.<\/p>\n

\n
\"\"<\/figure>\n<\/div>\n

Screenshots from attached images depict the shinyhunte.rs page with \u201cDOOMSDAY: The Story of James\u201d manifesto and a pie chart visualizing user countries, highlighting U.S. dominance. James claims the breach stemmed from a web app vulnerability or misconfiguration, turning the criminals\u2019 haven into a liability.<\/p>\n

\n
\"\"<\/figure>\n<\/div>\n

Under the banner \u201cDoomsday,\u201d James portrays himself as a \u201cpredator\u201d transcending generations, boasting infiltrations of Google, Microsoft, the FBI, the NSA, and more.<\/p>\n

He names alleged operators like Dorian Dali (Kams), Nahyl Ojeda (INDRA), Ali Aboussi (Kernel), and founders Prosox\/Kuroish, vowing their downfall for betraying a higher purpose. Addressing French readers, James positions himself as a protector against these \u201cchildren\u201d he once mentored, linking to anti-France activities.<\/p>\n

The text blends hacker lore with philosophical rants on power, evil, and redemption, echoing past underground manifestos.<\/p>\n

This self-inflicted wound exposes plaintext risks even on Dark Web sites, amplifying arrest threats amid global crackdowns. Victims face doxxing, while law enforcement gains leads on ShinyHunters derivatives within \u201cThe Com\u201d network. Resecurity, sharing<\/a> the dump for analysis, warns of broader disruptions to extortion rackets targeting firms like Salesforce.<\/p>\n

As James declares \u201cno place to hide,\u201d the BreachForums saga illustrates cybercrime\u2019s fragility, predators devoured by a greater one.<\/p>\n

Follow us on Google News<\/a>, LinkedIn<\/a>, and X<\/a> for daily cybersecurity updates. Contact us<\/a> to feature your stories.<\/strong><\/p>\n

The post BreachForums Hack: Hackers Expose All User Records from Popular Dark Web Forum<\/a> appeared first on Cyber Security News<\/a>.<\/p>\n<\/div>\n

\t

\n
<\/BR>
\n Guru Baran
\n \t

\n
<\/BR>
\nGo to cyber-security-news<\/a>
\n \t

\n
<\/BR><\/p>\n","protected":false},"excerpt":{"rendered":"

BreachForums Hack: Hackers Expose All User Records from Popular Dark Web Forum In a dramatic turn for the cybercrime underworld, a mysterious hacker known as \u201cJames\u201d has leaked the complete user database of BreachForums, a notorious Dark Web forum serving as a hub for stolen data trading and hacking discussions. The breach, announced on January […]<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[129,63],"tags":[130],"class_list":["post-9782","post","type-post","status-publish","format-standard","hentry","category-cyber-security","category-cyber-security-news","tag-cyber-security-news"],"_links":{"self":[{"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/posts\/9782"}],"collection":[{"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/comments?post=9782"}],"version-history":[{"count":0,"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/posts\/9782\/revisions"}],"wp:attachment":[{"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/media?parent=9782"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/categories?post=9782"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/serisec.com\/index.php\/wp-json\/wp\/v2\/tags?post=9782"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}