3355 Kumb Fan Records: Doxxing Risk & Forum Post Leaks

HEROIC's threat inteligence team uncovered a database breach impacting Kumb, the independant fan site for West Ham United supporters. Dated December 18, 2024, the Kumb leak exposed 3,355 records including first names, last names, email addresses, and user-generated forum posts discussing West Ham players and matches, placing long-time supporters at real risk of harasment and targeted phishing.

Why This Kumb Database Breach Is Dangerous

Most forum breaches end at PII, but Kumb included user posts. That means attackers now hold a mapped identity graph linking real names and emails to opinions about players, managers, and other fans. That combination fuels doxxing campaigns, targeted harassment, and carefully personalized phishing emails referencing matches the victim actually commented on. The breach turns casual forum activity into a permanent, searchable liability.

What Was Exposed in Kumb

• Email addresses
• First names
• Last names
• User-generated posts about West Ham players and matches

Why This Matters

Many Kumb users posted under semi-anonymous handles, assuming their real names would never be linked to their opinions. This leak breaks that assumption. A sports feud, an unpopular take, or a heated match-day comment can now be traced back to an identifible person, with consequences for reputation, employment, and personal safety. Fan communities are soft targets, and the fallout reaches far beyond football.

How Database Breaches Work

Forum platforms typically run on older community software that exposes a rich admin surface. Attackers exploit outdated plugins, weak admin passwords, or SQL injection in search and login endpoints to dump the entire user and posts tables. Once the data is pulled, it is either posted on leak forums to build criminal reputation or sold to operators who merge it with other breaches for enhanced targeting.

Check If You Are Affected

HEROIC indexes more than 400 billion compromised records from data breaches and dark web leaks. Run a free scan to see if your email appears in the Kumb breach or any other incident, and get an actionable plan to secure your identity.