253 Hacked Accounts From HackReviews Have Been Circulating Since 2016

HEROIC analysts recieved intelligence on a database breach affecting HackReviews, a user-review community based in the United States. The breach, which occured on November 1, 2016, exposed 253 user accounts. While the record count is small, this data has been circulating in underground markets and Telegram channels for nearly a decade, a reminder that even minor leaks carry lasting risk for the people behind those accounts.

What Attackers Can Do With Hacked Forum Accounts

Even without financial data, a stolen forum account is a useful tool for bad actors. Attackers can use compromised credentials from HackReviews to attempt logins on email services, social media, and banking sites, partcularly if the victim reused the same password. The vBulletin password hashes found in this breach can also be cracked offline, giving attackers plain-text passwords to use in wider attacks.

What Was Exposed in the HackReviews Breach

• User account credentials
• vBulletin password hashes (vB format)
• Account metadata associated with 253 registered users

Why a 2016 Breach Still Puts You at Risk Today

Old breaches do not expire. Data from 2016 is still accessable to threat actors who trade and aggregate leaked databases. If your HackReviews credentials matched passwords you use elsewhere, those accounts remain vulnerable to credential stuffing and account takeover attacks right now. Identity theft and phishing campaigns routinely draw from aged breach data.

How a Database Breach Works

A database breach happens when an attacker gains unauthorized access to a website's back-end database, usually by exploiting a software vulnerability, a misconfigured server, or stolen admin credentials. Once inside, they copy user records, including usernames, email addresses, and password hashes, and export them. The stolen data is then sold, traded, or published on dark web forums where other criminals can download and use it.

Check If Your Data Was Exposed

HEROIC's free breach scanner searches across more than 400 billion records to tell you instantly whether your email address appeared in the HackReviews breach or hundreds of other known data leaks. Enter your email at HEROIC.com to find out what attackers may already know about you.