Segforum Leak: A Small German Forum, 2,148 Full User Profiles

HEROIC analysts verified the Segforum breach on February 3, 2025, after a user database extract from the German Segway enthusiast forum (segforum.de) was posted to a dark web data broker channel. The leak exposed 2,148 user records with email addresses, usernames, phpBB password hashes, IP addresses, and birthdays.

Why This Forum Breach Is Dangerous

phpBB hashes, especially in older installations, are vulnerable to offline cracking. That turns a small forum leak into working logins once attackers bulk-test common passwords. The package of username, email, hash, IP, and birthday is enough to impersonate a member or answer reset challenges on other sites.

What Was Exposed in the Segforum Leak

• Email addresses used to register on Segforum
• Usernames from the forum profile
• phpBB password hashes
• IP addresses captured at login
• Birthdays listed on user profiles

Why This Matters

Hobby forums are notorious for password reuse. A cracked phpBB hash often unlocks personal email, shopping accounts, and social media for the same user. Full names are inferable from usernames tied to enthusiast communities, and birthdays support identity theft or social engineering against German banking and government portals.

How Database Breaches Work

Older phpBB installations are common targets for SQL injection, exposed admin scripts, and outdated plugin flaws. Attackers pull the users table, crack the weaker hashes offline, and post or sell the combined credential and PII set on forum-focused dark web channels.

Check If You Are Affected

If you have registered on Segforum or any phpBB-based community, rotate the password everywhere it was reused. Run HEROIC's free scan against 400 billion plus exposed records to confirm whether your email has appeared in this dump.