Researchers Link the MajorGeeks Breach to 227,560 Exposed Accounts

HEROIC analysts identified a breach connected to MajorGeeks, a US-based software support forum at majorgeeks.com, that exposed 227,560 user records. The breach dates back to November 14, 2015, and the exposed data set includes IP addresses, email addresses, usernames, and passwords hashed using vBulletin's method.

Why the MajorGeeks Breach Still Poses a Threat

vBulletin's password hashing can be cracked with modern hardware, and at a scale of 227,560 accounts, attackers only need to succeed against a portion of the list to make it worthwhile. Once cracked, those passwords are tied to real email addresses, usernames, and IP addresses, giving attackers a detailed starting point for account takeover or targeted phishing against former MajorGeeks members.

What Was Exposed in the MajorGeeks Breach

• IP addresses
• Email addresses
• Usernames
• Passwords (vBulletin hashed)

Why This Matters for MajorGeeks Members

MajorGeeks attracts a technically engaged audience, but that does not make its members immune to password reuse. Cracked credentials from this breach can be tested automatically against email providers, banking sites, and other software or tech accounts through credential stuffing. A password reused from a 2015 forum signup could still be the weak link that exposes a much more important account today.

How a vBulletin Forum Breach Happens

Forums running vBulletin, like MajorGeeks did, have historically been targeted through unpatched software vulnerabilities or weak administrator credentials. Once attackers gain access, they export the full user table, including hashed passwords, emails, usernames, and IP logs, then distribute the stolen database through hacking forums or online marketplaces. From there, the data can keep resurfacing for years, exactly as happened with this decade-old breach.

Check If You Are Affected

With 227,560 records exposed, this breach remains a substantial source of credentials still capable of fueling attacks today. HEROIC's free breach scanner checks your email address against a database of more than 400 billion leaked records, including this one, so you can find out in seconds whether your information was exposed and take steps to secure your accounts.