Entire BreachForums database leaked online in major slam for online criminals

Circuit board and shield icon, Hardware security, computer data protection and electronic technology concept,
(Image credit: Shutterstock / Blue Andy)

A threat actor known by their alias ‘emo’ has posted the entire BreachForums v1 database, generated through late 2022, on Telegram, reportedly with the aim of allowing users to fix the holes in their OPSEC (operational security).

As reported by BleepingComputer, emo started leaking the data this past weekend, first going with member data information (member names, email addresses, and IP addresses - after they were banned from the current version of the forum). 

After that, they exposed the rest, which includes a “tremendous amount” of additional data.

Sold by Pompompurin

"Find enclosed the full BreachForum v1 database, every record up to November 29th, 2022," Emo posted to Telegram. 

"This database includes everything, Private Messages, Threads, Payment logs, detailed IP logs for each user, etc. I originally only leaked the user table to discourage it from being sold behind the scenes by BreachForum staff, however it's become apparent that so many people have the database now that it being leaked is an inevitability."

"This will give everyone a chance to review their records and fix holes in their OPSEC."

The archive also appears to contains members’ hashed passwords, private messages, cryptocurrency wallets used to buy forum credits, and every post ever made on the site. Cybersecurity researchers can use the messages to get a better understanding of how threat actors operate and compromise networks, while the cryptocurrency wallet data can be used to connect specific ransomware payments to individual criminals. 

Apparently, the database was originally sold in July 2024, by the forum’s founder, Conor Fitzpatrick, AKA Pompompurin. 

In early January 2024, Fitzpatrick was sentenced to 20 years of supervised release for operating the forum. The first two years of his sentencing, Fitzpatrick will serve in home arrest, with a GPS locator. He will also undergo mental health treatment. Furthermore, he is banned from the internet for a year, and will have monitoring software installed on his devices. 

More from TechRadar Pro

Sead is a seasoned freelance journalist based in Sarajevo, Bosnia and Herzegovina. He writes about IT (cloud, IoT, 5G, VPN) and cybersecurity (ransomware, data breaches, laws and regulations). In his career, spanning more than a decade, he’s written for numerous media outlets, including Al Jazeera Balkans. He’s also held several modules on content writing for Represent Communications.

Read more
Ransomware
Top ransomware gang's internal chat logs leaked online
Data leak
Details of over 15,000 FortiGate devices leaked online, so be on your guard
Data leak
Top collectibles site leaks personal data of nearly a million users
Cartoon Phishing
One of the largest data leaks ever sees info on 1.5 billion people leaked online
Security
American National Insurance Company breach data found online
A person using DeepSeek on their smartphone
DeepSeek security breach - critical databases exposed, more than one million records reportedly leaked
Latest in Security
Data leak
Top home hardware firm data leak could see millions of customers affected
Representational image depecting cybersecurity protection
Third-party security issues could be the biggest threat facing your business
A stylized depiction of a padlocked WiFi symbol sitting in the centre of an interlocking vault.
Broadcom warns of worrying security flaws affecting VMware tools
Android Logo
Devious new Android malware uses a Microsoft tool to avoid being spotted
URL phishing
HaveIBeenPwned owner suffers phishing attack that stole his Mailchimp mailing list
Ransomware
Cl0p resurgence drives ransomware attacks to new highs in 2025
Latest in News
An image of Pro-Ject's Flatten it closed and opened
Pro-Ject’s new vinyl flattener will fix any warped LPs you inadvertently buy on Record Store Day
EA Sports F1 25 promotional image featuring drivers Oscar Piastri, Carlos Sainz and Oliver Bearman.
F1 25 has been officially announced, with this year's entry marking a return for Braking Point and a 'significant overhaul' for My Team mode
Garmin clippd integration
Garmin's golf watches just got a big software integration upgrade to help you improve your game
Robert Downey Jr reveals himself as Doctor Doom to a delighted crowd at San Diego Comic-Con 2024
Marvel is currently revealing the full cast for Avengers: Doomsday, and I think it's going to be a long-winded announcement
Samsung QN90F on yellow background
Samsung announces US prices for its 2025 mini-LED TV lineup, and it’s good and bad news
Nintendo Switch Lite
Forget the Nintendo Switch 2, the original Switch is getting one last hurrah in a surprise Nintendo Direct tomorrow