The Programming Forums Breach Exposed Exactly 99,332 Accounts

HEROIC analysts identified 99,332 exposed accounts tied to Programming Forums, a coding community breach dated January 2015. The exposed data includes IP addresses, email addresses, usernames, passwords, and hash type information, making this one of the larger legacy breaches in HEROIC's database.

Why the Programming Forums Breach Still Poses Risk

The passwords in this breach were hashed using the vBulletin (vB) format, an older hashing scheme that modern computing can crack far more easily than newer algorithms. Combined with IP addresses, email addresses, and usernames, attackers have enough information to attempt logins on other services, and in some cases to narrow down a person's general location at the time of the breach.

What Was Exposed in the Programming Forums Breach

• IP addresses
• Email addresses
• Usernames
• Passwords (vB hash format)

Why This Matters for Programming Forums Members

A developer community like Programming Forums often includes people who reuse a handful of passwords across work and personal accounts. Attackers exploit this through credential stuffing, feeding leaked email and password pairs into automated tools that test them against email providers, cloud services, and code repositories. If any of the 99,332 exposed accounts reused a password elsewhere, those accounts remain at risk today.

How This Database Breach Happened

This incident is classified as a database breach, meaning attackers gained direct access to the site's user database rather than collecting data through malware on individual machines. Forum platforms running vBulletin during this period were frequently targeted through unpatched software vulnerabilities or compromised administrator accounts. Once attackers gain access, they can export the full user table, in this case capturing IP addresses, emails, usernames, and hashed passwords for tens of thousands of accounts in one file.

Check If You Are Affected by the Programming Forums Breach

You don't need to guess whether your information was part of the Programming Forums breach or any other leak. HEROIC's free breach scanner checks your email address against a database of more than 400 billion leaked records and shows you exactly what was exposed. If you find a match, change the password on any account still using it and enable multi-factor authentication where you can.