Stolen BreachForums data on sale

Dismantled hacking site BreachForums, also known as Breached, had its database stolen from a cyberattack last November offered for sale by the threat actor "breached_db_person," who also shared the database with Have I Been Pwned, BleepingComputer reports. Included in the stolen database are 212,000 records, including usernames and IP and email addresses, as well as argon2-hashed passwords and private messages of BreachForums members, according to Have I Been Pwned. BleepingComputer was informed by breached_db_person that data tables for member database, private messages, and payment transactions are in the 2 GB file, with some of the shared data revealing details on payments for forum rank and credit purchases, as well as conversations that could be beneficial in determining prior intrusions and the identities of attackers part of the forum. Baphomet, who was BreachForums' last administrator following the arrest of admin Pompompurin in March, confirmed the veracity of the stolen data but said that breached_db_person may have gotten hold of an older forum database.