Dark Web Intel: 108,940 Credentials From the Softball Fans Database Dump

HEROIC analysts found the Softball Fans database dump circulating in breach aggregation channels, dated November 2021. The exposure occured across 108,940 user records from this US-based softball discussion forum, with data including email addresses, usernames, gender information, bcrypt password hashes, and cryptographic salts.

What Attackers Can Do With Hashed Passwords and Email Addresses

Even though the Softball Fans passwords were stored as bcrypt hashes rather than plaintext, the combination of email addresses, usernames, and salts gives attackers a structured dataset to work with. Threat actors can attempt offline hash-cracking on weaker passwords, and the verified email list is beleived to be especially valuable for targeted phishing and spam campaigns against real, active accounts.

What Was Exposed in the Softball Fans Breach

• Email Address
• Username
• Gender
• Password Hash (bcrypt)
• Salt

Why Forum Breaches Like Softball Fans Create Lasting Risk

Online forum users frequently reuse credentials across multiple platforms, making a breach like this partcularly useful for credential stuffing attacks. With 108,940 verified email-and-hash pairs in circulation, attackers can test these credentials against banking, shopping, and social media sites. Gender and username data also make phishing messages more personalized and convincing, increasing the chance of a successful follow-on attack.

How a Database Breach Works

A database breach happens when an attacker gains unauthorized access to a platform's stored user records, typically through exploiting unpatched software vulnerabilities, weak administrative credentials, or misconfigured database permissions. The attacker exports the data and distributes it through dark web forums or private channels, often before the affected organization is aware any intrusion occured.

Check If Your Data Was Exposed

HEROIC's free breach scanner checks your email address against more than 400 billion records, including the Softball Fans breach and thousands of other known data exposures. Scan your email for free at HEROIC and find out whether your credentials are already accessible to attackers.