The Grace on the Moon Breach: 245 Stolen Records Exposed

HEROIC analysts recieved intelligence about a database breach tied to Grace on the Moon, a small U.S.-based health community website. The breach occured in November 2016 and exposed 245 records. While the leaked data types were limited, the incident resurfaced years later in active credential-sharing channels, confirming that even small, older breaches remain a real and ongoing threat to anyone who was ever a member.

How Stolen vBulletin Credentials Put Members at Risk

The Grace on the Moon database used vBulletin password hashing, which attackers can crack with modern tools relatively quickly. Once cracked, those credentials become accessable to any threat actor willing to purchase or download them. Attackers routinely test recovered passwords across email providers, banking sites, and social media, betting that users reuse the same password in multiple places.

What Was Exposed in the Grace on the Moon Breach

• User account credentials (vBulletin hashed passwords)
• Member login data from the site database

Why a Small Health Community Breach Still Puts You at Risk

Health-related community sites often attract users who share personal concerns and use the same passwords across more sensitive accounts. Even 245 records is enough to fuel targeted credential stuffing campaigns. Attackers are partcularly focused on pairing old forum credentials with current email addresses to gain entry to financial or medical accounts, leading to identity theft and fraud.

How a Database Breach Works

A database breach happens when an attacker gains unauthorized access to a website's backend database, usually by exploiting a software vulnerability or weak server security. Once inside, they download the stored user records, which can include usernames, email addresses, and hashed passwords. The stolen data is then sold or traded online, where other criminals use it to attempt logins on popular websites and apps.

Check If Your Data Was Exposed

HEROIC's free breach scanner searches across more than 400 billion records to tell you instantly whether your email address appears in the Grace on the Moon breach or hundreds of thousands of other known incidents. Run a free scan now at HEROIC.com to see what data of yours may already be in the hands of attackers.