17K JetAudio Forum Emails, Birthdates & Hashes Leaked

HEROIC's DarkHive intelligence system discovered the JetAudio data breach, exposing 17,542 records. The breach occured in November 2008 when the forum for this popular audio software, owned by COWON electronics, had its database compromised. The breach exposed email addresses, password hashes, usernames, IP addresses, and birthdates, creating a combination of data that remains valuable for credential stuffing and identity theft atacks.

Why This Is Dangerous

vBulletin password hashes from 2008 are susceptible to cracking with modern GPU-based tools, and many users chose weak or common passwords that are already included in publicly available cracking dictionaries. Once cracked, these passwords combine with email addresses, usernames, and birthdates to enable account takeover atacks across many services where affected users reused thier credentials. Birthdates combined with email addresses create identity verification data that attackers use to bypass account recovery processes at banks, email providers, and other platforms.

What Was Exposed

• Email Address
• Password Hash
• Username
• IP Address
• Birthday

Why This Matters

Forum breaches from the late 2000s are especially dangerous because users rarely think to update passwords from that era. The JetAudio forum attracted tech-savvy users who likely maintained active accounts on software repositories, development platforms, and other services where the same credentials may have been reused. Birthdates in this dataset give attackers a key piece of identity verification information that helps them answer security questions and pass identity checks at financial institutions. Credential stuffing attacks using this data can compromise current accounts even though the original breach is over 15 years old.

How Database Breaches Work

Forum platforms running on vBulletin software were common targets for SQL injection attacks in the 2000s due to widely known vulnerabilites in older versions of the platform. Once attackers exploit these vulnerabilities, they extract the user database containing all account information including hashed passwords. vBulletin hashing without strong salting leaves passwords vulnerable to rainbow table and dictionary attacks, particularly for common passwords. The extracted database gets posted to breach aggregation sites and dark web forums, where it circulates for years as part of larger credential collections used for automated stuffing attacks.

Check If You Are Affected

HEROIC offers a free identity scanner that searches over 400 billion records, including data from breaches like JetAudio. Visit heroic.com to scan your email address and find out if your information was exposed. If you had an account on the JetAudio forum before 2008 and recieve a positive result, change any passwords that match the one you used on that forum, and update your account recovery information on platforms that use your birthdate as a security verification method.