The AcneOrg Leak: 367,415 Passwords Exposed. Yours Might Be One.

HEROIC analysts identified 367,415 exposed accounts tied to AcneOrg, a health forum breach dated November 24, 2014. The exposed data includes IP addresses, email addresses, usernames, passwords, and hash type information, giving attackers a fairly complete set of login details tied to a health-focused community.

Why This Health Forum Breach Deserves Extra Caution

The passwords in this breach were hashed using the IPB format, the scheme used by IP.Board forum software at the time. Hashes from this era can be cracked with modern computing power, and combined with matching email addresses, usernames, and IP addresses, attackers have enough information to attempt logins elsewhere. Because this forum centers on a personal health topic, exposed account activity here also carries a quieter privacy concern beyond the usual password risk.

What Was Exposed in the AcneOrg Breach

• IP addresses
• Email addresses
• Usernames
• Passwords (IPB hash format)

Why This Matters for AcneOrg Members

If you signed up for AcneOrg using a password you've also used elsewhere, that other account is at risk today. Attackers run automated credential stuffing tools that test leaked email and password combinations against banking sites, email providers, and social media platforms. A breach of this size, more than 367,000 accounts, means the odds are real that your information is included if you were ever a member.

How This Database Breach Happened

This incident is classified as a database breach, meaning attackers gained direct access to AcneOrg's user database rather than collecting data through malware. Forum platforms running IP.Board software during this period were frequently targeted through unpatched vulnerabilities or stolen administrator credentials. Once inside, attackers can export the entire user table, capturing IP addresses, emails, usernames, and hashed passwords for all 367,415 accounts in a single file.

Check If You Are Affected by the AcneOrg Breach

You don't need to guess whether your information was part of the AcneOrg breach or any other leak. HEROIC's free breach scanner checks your email address against a database of more than 400 billion leaked records and shows you exactly what was exposed. If you find a match, change the password on any account still using it and enable multi-factor authentication where you can.