The Torrent Invites Leak Exposed More Than Passwords: 317,343 Records

HEROIC analysts identified a breach tied to Torrent Invites, a vBulletin forum, dating to December 2013. The breach exposed 317,343 records containing email addresses, usernames, IP addresses, birthdates, and salted MD5 password hashes.

Why a Birthdate Changes the Risk Calculation

Most breaches on record stop at email and password. This one adds a birthdate to the mix, which is exactly the kind of detail used to verify identity over the phone, answer security questions, or pass basic identity checks. Combined with an email address and username, it gives an attacker meaningfully more than a typical credential leak.

What Was Exposed in the Torrent Invites Breach

• Email addresses
• Usernames
• IP addresses
• Birthdates
• Password hashes (salted MD5)

Why This Matters Beyond a Torrent Forum

Salted MD5 hashes are stronger than plain MD5, but still crackable with enough computing time, so the passwords in this breach shouldn't be considered safe. Between the credentials and the personal details, this data supports both direct account takeover and identity-verification fraud against services that use birthdates to confirm who you are.

How a Database Breach Like This Happens

This is logged as a database breach, meaning Torrent Invites' forum database was accessed directly rather than gathered one account at a time. vBulletin forums have historically been popular attack targets because of well-documented vulnerabilities in older, unpatched versions.

Check If You Were Affected by the Torrent Invites Breach

If you ever had an account on Torrent Invites, check whether your email is part of this exposure. HEROIC's free breach scanner checks your email against more than 400 billion leaked records so you can see exactly what's at risk.