Forum Volt

We've been tracking the uptick in forum database leaks hitting Telegram channels, but the **Forum Volt** breach stood out. What really struck us wasn't the size of the dump—it was the relatively high percentage of active users and the detailed profile information available, including private messages and purchase history. The data had been circulating quietly for a few weeks, primarily on smaller, invite-only channels, before gaining wider visibility. This slow burn suggests a targeted initial release, possibly to establish credibility before broader distribution.

The Forum Volt Leak: 715,000 User Records Fueling Credential Stuffing

The **Forum Volt** breach exposed a significant trove of user data from the now-defunct forum. The leak, first observed on a private Telegram channel on **October 26, 2023**, quickly spread to multiple breach forums and file-sharing sites. What caught our attention was the relatively recent activity timestamps within the database, suggesting the data was fresh and that many of the exposed credentials may still be valid. This matters to enterprises because compromised accounts from forums like these are frequently used in credential stuffing attacks against corporate services, especially if users re-use passwords. This incident underscores the ongoing threat posed by forum breaches, particularly in an era where attackers are increasingly automating the process of harvesting and exploiting compromised credentials.

Breach Stats:

* **Total records exposed:** 715,000
* **Types of data included:** Usernames, email addresses, hashed passwords, IP addresses, registration dates, private messages, purchase history, and forum activity logs.
* **Sensitive content types:** Private messages containing personal information and potentially sensitive discussions. Purchase history revealing user interests and spending habits.
* **Source structure:** The data was leaked as a compressed SQL database file.
* **Leak location(s):** Telegram channels, various breach forums, and file-sharing websites.

External Context & Supporting Evidence

While there hasn't been widespread media coverage of the **Forum Volt** breach specifically, similar forum database leaks have been reported on by outlets like **BleepingComputer** and **The Record**. These reports highlight the persistent threat of forum breaches and the potential for stolen credentials to be used in credential stuffing attacks.

OSINT sources indicate that the leaked database is being actively traded and discussed on various hacking forums and Telegram channels. One Telegram post claimed the database was "gold for account cracking" due to the high percentage of active users.

The breach aligns with a broader trend of attackers targeting online communities and forums to harvest user data. Open-source tools and techniques for scraping and analyzing forum data are readily available on **GitHub**, making it easier for attackers to automate the process of identifying and exploiting vulnerable forums.