The GoHens Football Forum Breach Put 7,123 Hashed Passwords Online

HEROIC analysts identified 7,123 exposed records tied to a GoHens data breach dated August 18, 2015. GoHens is a sports community website focused on football. The exposed dataset includes email addresses, usernames, and passwords hashed using MD5 with phpBB3 formatting, along with hash type information for each record.

The GoHens Football Forum Breach Put 7,123 Hashed Passwords Online

A forum for football fans might seem like an unlikely target, but any site running user accounts is a potential source of reusable credentials. The passwords in this breach were hashed using MD5, an older and now weak hashing algorithm that is well known to be crackable with modern tools. Combined with the phpBB3 formatting, which is a common and well documented forum software setup, attackers have an easier time cracking these specific hashes than they would with a modern, properly salted hashing method.

What Was Exposed

• Email addresses
• Usernames
• Passwords hashed with MD5 (phpBB3)
• Hash type metadata

Why This Matters

Once a password hash from this breach is cracked, it becomes a usable, plain text password tied to a real email address. Attackers feed cracked credentials like these into automated tools that test the same login across banking sites, email providers, and other websites in bulk, a technique known as credential stuffing. If any of the 7,123 people affected reused their GoHens password on a more sensitive account, the consequences of this small forum breach could extend to real financial or personal harm.

How a Database Breach Exposes Forum Credentials

This incident is classified as a database breach, meaning attackers obtained the data directly from GoHens' stored records rather than through malware on individual devices. Community forums like this one are common targets for this kind of breach because they often run older software and receive less frequent security attention than larger commercial platforms. Attackers typically exploit a known vulnerability in the forum software, use stolen administrator credentials, or find a server that was never properly secured to gain access.

Check If You Are Affected

If you have ever had an account on the GoHens forum, it is worth checking whether your information appears in this breach. HEROIC's free breach scanner searches more than 400 billion leaked records to show you exactly where your email address and passwords have surfaced. Run a free scan today and update any passwords you may have reused across other accounts.