The Insanelyi Breach Put 87,974 iOS Jailbreak Users’ Passwords Online

HEROIC analysts identified the Insanelyi breach, a dataset tied to the domain insanelyi.com and dated July 21, 2014. Insanelyi was a popular forum for users of jailbroken iOS devices running Cydia. The site was hacked by an attacker known as Kim Jong-Cracks, and the breach disclosed 87,974 records, including email addresses, usernames, and passwords hashed using the IPB (salted MD5) format.

The Insanelyi Breach Put 87,974 iOS Jailbreak Users' Passwords Online

Jailbreak communities tend to attract technically engaged users, but that does not make their credentials any less valuable to attackers. The IPB hashing format used here is a salted variant of MD5, which is weaker than modern standards and can be cracked with widely available tools, especially for passwords that are not particularly long or complex.

What Was Exposed in the Insanelyi Breach

• 87,974 records tied to insanelyi.com
• Email addresses
• Usernames
• Passwords hashed in IPB (salted MD5) format
• Breach dated July 21, 2014

Why This Matters for Insanelyi Users

Anyone who registered on a forum like this and reused the same password elsewhere is exposed to credential stuffing, where attackers try cracked or leaked passwords against email accounts, app stores, and other services. Once a password is recovered, account takeover follows quickly, and from there, identity theft and financial fraud become real possibilities depending on what other accounts share that same password.

How a Database Breach Like This Happens

A database breach happens when an attacker gains unauthorized access to the records stored behind a website, often through a software vulnerability, and copies the data out. In this case, the attacker publicly claimed responsibility for the intrusion rather than staying anonymous, and the stolen data eventually made its way into wider circulation on forums and Telegram channels where IPB-hashed passwords are routinely run through cracking tools.

Check If You Were Affected by the Insanelyi Breach

If you ever created an account on insanelyi.com, it is worth checking whether your email and password were part of this leak. HEROIC's free breach scanner checks your email against a database of more than 400 billion leaked records, including this one, so you can find out in seconds and change any reused passwords right away.