Death Addict’s 67-Account Breach Has Outlasted Most Database Leaks of 2016

HEROIC analysts identified a database breach affecting Death Addict, a website based in the United States, that occured in November 2016. The breach exposed 67 user accounts, a number smaller than most high school graduating classes, yet this data has beleived to have been traded in underground forums ever since. Small breaches like this one are partcularly dangerous because they fly under the radar, never making headlines while the exposed credentials quietly fuel credential stuffing campaigns for years.

How Stolen vBulletin Credentials Enable Account Takeover

The Death Addict breach captured vBulletin password hashes. Attackers run these hashes through cracking tools and dictionary attacks until plain-text passwords emerge. Once recovered, those passwords are tested against email providers, social networks, and financial sites. If the original user recieved the same password across multiple accounts, every one of those accounts is at risk, not just the original Death Addict login.

What Was Exposed in the Death Addict Breach

• User account credentials for 67 registered members
• vBulletin password hashes (vB format)
• Account metadata from the site database

Why Tiny Breaches Carry Outsized Long-Term Risk

A 67-record breach may seem trivial, but the data from this 2016 incident remains accessable to threat actors today. Old credentials are aggregated into massive combolists used for credential stuffing, identity theft, and phishing. Attackers do not discard small breaches; they combine them with data from other leaks to build detailed profiles of individuals, making financial fraud and account takeover far more effective.

How a Database Breach Works

A database breach occurs when an attacker finds a weakness in a website's back-end system, such as an unpatched software vulnerability or a poorly secured server. The attacker extracts user records directly from the database. For sites running vBulletin forum software, this typically means usernames, email addresses, and hashed passwords are copied and exported. The stolen records then circulate on dark web markets and hacker forums.

Check If Your Data Was Exposed

HEROIC's free breach scanner cross-references your email address against more than 400 billion records, including the Death Addict breach and thousands of other known data leaks. Visit HEROIC.com to run a free check and find out whether your credentials have been compromised.