uTorrent Forum Data Breach Targets 394,755 User Accounts

In early 2016, the community forum for uTorrent, the widely used BitTorrent client, was breached, and HEROIC analysts have tracked how the resulting database, containing 394,755 accounts, later spread on Telegram. If you ever created a login on the uTorrent forum, this breach is aimed squarely at you. Scanning your email is the fastest way to check if your account was one of them.

Forum Members Were the Real Target

This wasn't a broad combolist scraped from many places, it was one company's own forum database, meaning everyone affected registered specifically on uTorrent's community platform. That makes the exposure more personal than a generic credential dump, since it ties directly back to accounts people actually created there.

What Was Exposed

• Email Address: identifies the account holder and opens the door to targeted phishing attempts.
• Username: reveals the identity used on the forum, which attackers can try against other sites too.
• IP Address: can hint at a user's general location or device at the time of registration.
• Password Hash: stored using the older MD5 method, which modern hardware can crack quickly.
• Salt: paired with each hash for extra protection, though it wasn't enough against fast MD5 cracking.
• Plaintext Password: a portion of passwords had already been converted into readable form, meaning no cracking was even needed for those.

Why an Old Forum Breach Still Carries Weight

A weak hash paired with a salt buys some time, not permanent protection. A decade of improving cracking hardware has made MD5 passwords far easier to recover than when this breach first happened, and any password reused since 2016 is still a live risk today.

How This Breach Came Together

The uTorrent forum ran on IP.Board software, and its database was compromised directly, exposing the accounts stored inside. That data circulated for years before eventually surfacing again in a Telegram upload, which is how HEROIC analysts identified it as still actively shared.

Were You a uTorrent Forum Member?

Scan your email to see if your account appears in this breach. If it does, change your password for that account and anywhere you may have reused it since 2016, whether on personal or work logins, since old passwords have a way of outliving the sites they were created for.