18,257 Engineer Boards Passwords Just Resurfaced on the Dark Web

HEROIC analysts identified a breach connected to Engineer Boards, a US-based forum for engineering professionals and students at engineerboards.com, that exposed 18,257 user records. The breach dates back to November 10, 2015, and the exposed data set includes IP addresses, email addresses, usernames, and passwords hashed using Invision Power Board's method.

Why the Engineer Boards Breach Deserves Attention

IPB password hashes can be cracked with modern computing power, and once cracked, they are tied directly to email addresses, usernames, and IP addresses. Because Engineer Boards caters to engineering professionals, some of whom may have privileged access to sensitive systems at their workplaces, a cracked password reused elsewhere could give attackers a foothold well beyond a simple forum account.

What Was Exposed in the Engineer Boards Breach

• IP addresses
• Email addresses
• Usernames
• Passwords (IPB hashed)

Why This Matters for Engineer Boards Members

Even a decade after the fact, cracked credentials from this breach can be fed into automated credential stuffing tools and tested against email providers, banking sites, and workplace accounts. Because engineering professionals often work with sensitive technical systems, a reused password from this forum could end up being the entry point for a much more damaging compromise.

How a Database Breach Like This Happens

A database breach like this one typically starts when attackers exploit a vulnerability in forum software or server configuration to gain backend access. From there, they export the complete user table, including hashed passwords, emails, usernames, and IP logs, then distribute the file through hacking forums and dark web marketplaces. This kind of data can sit and quietly circulate for years before resurfacing, as happened with this Engineer Boards breach roughly a decade after it first occurred.

Check If You Are Affected

With 18,257 records exposed, this breach is still a viable source of credentials for ongoing attacks. HEROIC's free breach scanner checks your email address against a database of more than 400 billion leaked records, including this one, so you can find out in seconds whether your information was exposed and take steps to secure your accounts.