The Verified Forum Breach Exposed Exactly 14,562 Accounts

HEROIC analysts have recorded a database breach affecting Verified, operating at verified.cm and once one of the largest Eastern European cybercriminal communities online, dated January 10, 2014. The incident exposed 14,562 records. According to the incident record, the breach hit the site's vBulletin forum and included users' private messages along with other potentially identifying information. The exposed data includes IP addresses, email addresses, usernames, and passwords hashed with MD5.

Why a Cybercrime Forum Breach Is Especially Dangerous

Verified was used by cybercriminals who took pains to stay anonymous, which makes this breach unusually valuable to law enforcement, rival criminals, and researchers alike. The combination of IP addresses, email addresses, and private messages can be used to unmask the real identities behind usernames that were meant to stay hidden, a very different kind of exposure than a typical consumer forum breach.

What Was Exposed in the Verified Breach

• Email addresses
• Usernames
• IP addresses
• Passwords hashed with MD5
• Private messages between forum members

Why This Matters

MD5 hashes from this era are inexpensive to crack with modern hardware, meaning a working password can be recovered for many of the accounts in this dump. For members of a cybercrime forum, that cracked password paired with an IP address and private message history can lead directly to deanonymization, extortion, or targeting by rival criminals and investigators. For anyone who reused a Verified password elsewhere, the standard risk of credential stuffing and account takeover still applies.

How a vBulletin Forum Breach Happens

This incident is classified as a database breach, meaning attackers accessed the site's backend directly rather than targeting individual users. Forums running vBulletin were frequently compromised through unpatched vulnerabilities or stolen administrator credentials, letting an attacker export the entire user table, including private message archives, in a single operation. Ironically, even forums built by and for cybercriminals are not immune to the same security failures they exploit in others.

Check If You Are Affected

Whether this breach applies to you directly or you simply want to know your broader exposure, HEROIC's free breach scanner checks your email against more than 400 billion breached records and shows you instantly what has surfaced.