Researchers Link the Forum Core Dump to 36K Stolen Credentials

Forum Core (forumcore.net) was a US-based online forum operating in the hacking and security discussion space. In March 2013, the forum's database was breached, exposing 36,625 user accounts. The stolen dataset includes email addresses, usernames, IP addresses, Invision Power Board (IPB) password hashes, and a hash type field identifying the exact algorithm used for each account. The breach is verified and has appeared in multiple aggregation databases since its initial exposure.

Why Forum Core Breach Is Dangerous

IPB password hashes from 2013 are crackable with modern hardware. The hash type field in this dataset removes any guesswork, allowing attackers to process each account using the definitly correct algorithm without running multiple attempts. For a forum in the hacking category, the user base likely includes individuals who maintained accounts on security platforms, developer tools, and other technically oriented services. A cracked Forum Core password may open doors to accounts that are particuarly valuable to attackers beyond typical gaming or retail targets.

What Was Exposed in the Forum Core Leak

• Email Address
• Username
• IP Address
• IPB Password Hash
• Hash Type Identifier

Why This Forum Core Data Puts You at Risk

The email-password pairs derived from cracking these IPB hashes are tested across banking, email, and social media platforms where password reuse is common. The IP address data adds a geographic layer that can be used to identify a user's approximate location and ISP, which some attackers use to make targeted phishing messages more convincing. If your Forum Core email also appears in more recent breaches, your combined exposure profile becomes considerably more detailed.

What Happens When a Hacking Forum's Own Data Gets Stolen

The breach occured in March 2013, but Forum Core data has continued appearing in new aggregation sets over the years. Users who registered on a hacking-category forum were often security-minded individuals with accounts across technical platforms. These accounts frequently have elevated access or are linked to professional email addresses. The Forum Core breach means 36,625 individuals discussing security topics in 2013 had their own credentials exposed, making this dataset useful for targeting security researchers, developers, and technically informed users who may have moved into roles with significant account privileges since then.

Check If Your Data Was Exposed

HEROIC's free breach search checks your email against 400 billion+ compromised records, including the Forum Core dataset. Search now to confirm whether your account was part of this breach. If you registered on Forum Core in 2013, update any accounts that shared your registration password and check whether your email appears in additional breach datasets.