Identity Theft Risk Grows After the Forbes Breach Hit 909,848 Users

HEROIC analysts have recorded a database breach affecting Forbes.com, dated February 14, 2014, and involving 909,848 exposed records. According to the incident record, the attack was attributed to the Syrian Electronic Army, allegedly carried out in retaliation for coverage the group viewed as hostile to Syria. Beyond leaking user credentials, the attackers also managed to post fake news stories to the Forbes website. The exposed data includes email addresses, usernames, and passwords stored in phpBB hash format.

Why This Breach Is Dangerous

Forbes is read by a large, professionally engaged audience, meaning many of the 909,848 exposed accounts likely belong to business professionals, journalists, and executives. An attacker who cracks the phpBB password hashes gains a credential pair that can be tested against corporate email, LinkedIn, and financial accounts. Because phpBB's default hashing from this era is not especially resistant to modern cracking hardware, a significant share of these passwords can realistically be recovered.

What Was Exposed in the Forbes Breach

• Email addresses
• Usernames
• Passwords hashed with phpBB's format

Why This Matters

When credentials from a breach like this resurface, they feed directly into credential stuffing attacks, in which automated tools try the same email and password combination across dozens of other sites. For the professionals affected, a compromised account can escalate quickly into identity theft or business email compromise, especially if the same password was reused for a work account. This breach is also a reminder that politically motivated attackers, not just financially motivated ones, target user databases as a way to embarrass or disrupt an organization.

How This Type of Database Breach Happens

This incident is classified as a database breach, meaning attackers gained direct access to the site's backend systems rather than phishing individual users. In the Forbes case, the attackers compromised the site's infrastructure deeply enough to both extract the user database and publish unauthorized content, indicating a broader system compromise rather than a narrow data leak. Once extracted, the database of emails, usernames, and password hashes could be freely copied and distributed.

Check If You Are Affected

If you ever created a Forbes.com account, especially around 2014, it is worth checking whether your information was part of this breach. HEROIC's free breach scanner checks your email against more than 400 billion breached records, giving you an instant answer and clear next steps to secure your accounts.