BodyBuildingForums.com.au Breach: How vBulletin Passwords Get Cracked

HEROIC analysts occured upon the BodyBuildingForums.com.au breach while tracking a resurgence of older Australian forum database dumps circulating in new breach compilations on Telegram channels. The breach, which dates to November 1, 2016, exposed records from the platform's vBulletin-powered user database. Although only 2 accounts appear in the confirmed dataset, the presence of vB-hashed passwords means cracking attempts are likely, and this data continues to be bundled with larger compilations targeting credential reuse.

The Real Danger of vBulletin Password Hashes in Forum Breaches

vBulletin password hashes are partcularly vulnerable to cracking tools that have become far more powerful since 2016. Attackers with access to these hashes can run them through high-speed cracking rigs offline, without any account lockout mechanism to slow them down. Once cracked, those same passwords are tested against email providers, banking apps, and social media accounts, making a forum breach far more dangerous than it first appears.

What Was Exposed in the BodyBuildingForums.com.au Breach

• vBulletin password hashes (vB format)
• User account records

Why Forum Database Breaches Keep Coming Back

Forum breaches from 2016 recieved less attention at the time than major corporate incidents, but they are highly persistent. Threat actors compile and repackage old forum dumps for credential stuffing campaigns, targeting users who have not changed passwords in years. Account takeover, identity theft, and financial fraud all become accessible vectors once a valid password hash is cracked, even from a small dataset.

How Database Breaches Work

A database breach occurs when an attacker exploits a vulnerability in a web application or server, such as an unpatched plugin, a SQL injection flaw, or weak admin credentials, to extract stored user data. Forum platforms running older software like vBulletin have historically been common targets because their codebases were widely known and vulnerabilities were well documented in attacker communities.

Check If Your Data Was Exposed

HEROIC's free breach scanner covers more than 400 billion records, including older forum dumps like BodyBuildingForums.com.au that keep reappearing in new compilations. Run a free scan now to find out if your email or password has been exposed, and get actionable steps to lock down your accounts before attackers use that data against you.