How the MoHackz Forum Breach Exposed 4,832 User Accounts

The MoHackz Data Breach: What HEROIC Found

HEROIC analysts identified a breach tied to MoHackz (mohackz.com), a hacking-focused online community, dated to August 1, 2013. The exposed dataset totals 4,832 records and includes IP addresses, password hash type metadata, email addresses, usernames, and passwords hashed with the IPB (Invision Power Board) algorithm.

Why This Is Dangerous for MoHackz Members

IPB's default password hashing from this era is not considered strong by modern standards, and with cracking hardware available today, a meaningful share of these 4,832 hashes could be recovered by a motivated attacker. Combined with the associated email addresses and usernames, that gives an attacker a working set of credentials, and because forum members in hacking-adjacent communities often reuse handles and passwords across other platforms, the exposure can extend well past the original site.

What Was Exposed in the MoHackz Leak

• IP addresses
• Password hash type metadata
• Email addresses
• Usernames
• Passwords (IPB hash format)

Why This Matters: Small Forums, Real Consequences

A leak of under 5,000 accounts will never make national headlines, but the risk to each individual affected is the same as in a much larger breach. Attackers routinely aggregate small leaks like this one with larger datasets to build broader credential stuffing lists, testing username and password combinations across email, banking, and social media platforms. The result can be account takeover, financial fraud, or identity theft for anyone whose MoHackz password was reused elsewhere.

How a Database Breach Like This Happens

This incident is classified as a database breach, meaning the underlying user table for MoHackz was extracted directly from the server rather than pulled from malware on an individual's device. Forums running IPB software during this period were frequently targeted through known vulnerabilities in outdated plugins and unpatched core software, which allowed attackers to copy the entire member database in one step.

Check If You Are Affected

If you ever had an account on MoHackz or reuse passwords across sites, it is worth checking your exposure. HEROIC's free breach scanner checks your email address against more than 400 billion breached records, including this one, so you can confirm your status in seconds and secure any accounts still using the same password.