BreachForums Version 5 data breach
From Breaches, in the HARD wiki · Updated
This article is about the March 2026 breach of BreachForums Version 5. For every breach, see Breaches.
The BreachForums Version 5 data breach exposed 339,778 accounts from breachforums.bf in March 2026. The data taken includes passwords, usernames and email addresses.[1]
Have I Been Pwned verified it and added it to its search on 27 Mar 2026, within a month. It is the 512th largest of the 618 breaches in HARD’s list.
What was exposed
BreachForums Version 5’s breach included 3 kinds of data. What each lets criminals do:
| Data | What it’s used for |
|---|---|
| Passwords | Criminals try leaked passwords on email, banking and shopping sites, because people reuse them. |
| Usernames | Half of a login. With a reused password, it opens other accounts. |
| Email addresses | Expect scam emails that name the company to look genuine. |
What to do
- Check whether you’re in it.Search your email address on Have I Been Pwned. It tells you which breaches it appears in, BreachForums Version 5 among them, without showing the data.
- Change your BreachForums Version 5 password.If the account still exists, sign in at BreachForums Version 5 (breachforums.bf) and change it.
- Change it anywhere you used the same one.Start with your email, then banking and shopping. Leaked passwords are tried on other sites automatically, within days.
- Use a password manager and two-step sign-in.A different password for every site means one breach can’t open the rest. Two-step sign-in stops a leaked password working on its own.
- Distrust messages that mention BreachForums Version 5.Scammers use breach data to sound genuine. Don’t click links in emails or texts about the breach; go to the site yourself.
Timeline
- : the breach, as best it can be dated.
- : Have I Been Pwned verifies the data and adds it to its search, within a month.
Similar breaches
Breaches that leaked the same kinds of data, closest in time:
- BreachForums (2025), August 2025, 672,247 accounts
- LandAirSea, January 2025, 337,373 accounts
- The Post Millennial, May 2024, 57 million accounts
- Internet Archive, September 2024, 31 million accounts
- Zacks (2024), June 2024, 12 million accounts
- Spoutible, January 2024, 207,114 accounts
See Breaches for all 618, and Updates for keeping your devices patched.
References
- ^ Troy Hunt. “BreachForums Version 5”, Have I Been Pwned, added 27 Mar 2026. Breach data licensed CC BY 4.0.
External links
- Have I Been Pwned, to check your email address
- breachforums.bf, BreachForums Version 5’s website