#breachforums

#breachforums

The allegedly stolen user data was later posted to shinyhunte[.]rs, alongside a message from a self-described cyber outlaw calling himself "James," who appeared keen to make sure his handiwork didn't go unnoticed. Have I Been Pwned's listing of the incident shows that the breach occurred before law enforcement's October 2025 takedown of the BreachForums domain, and that the leak comprised roughly 324,000 unique email addresses, usernames, and Argon2-hashed passwords, pulled from public posts, private messages, and other forum records.

US authorities have seized the latest incarnation of BreachForums, the cybercriminal bazaar recently reborn under the stewardship of the so-called Scattered Lapsus$ Hunters, with help from French cyber cops and the Paris prosecutor's office. The site, breachforums[.]hn, had become a public-facing leak shop for the group's latest extortion campaign, which targeted Salesforce and its corporate clientele. Visitors to both the clearnet and onion versions of the site were greeted today by an animated seizure notice courtesy of the US Department of Justice and the FBI,