ShinyHunters claim they now run BreachForums version 5 after the FBI seizure in October 2025 and assert that the forum has been run by many fakes, but by them. They warn of an unauthorized leak on January 9, 2026, claim that impostors named ‘N/A’ and ‘Indra’ have revived a counterfeit “legitimate” forum, and threaten to leak all BF backups—private messages, emails, IP addresses, and posts—unless stopped, stating they have exploits for all MyBB 1.8 versions. #Unknown
Incident Details
- Victim: BreachForums version 5
- Sector: Not Found
- Country:
- Actor: shinyhunters
- Source:
- Discovered: 2026-03-26 23:52:24.017270
- Published: 2026-03-26 11:10:00.000000
Information
- BreachForums version 5 was run by many fake accounts but operated by us following the FBI seizure on 10 Oct 2025.
- Maintaining such an ecosystem is a waste of our time.
- There was an unauthorised leak on 9 Jan 2026.
- Since then, false personas “N/A” and “Indra” successfully restored a similar-looking “legitimate” forum.
- All current forums are fake (.sb, .ac, .fi, .bf, .us, etc.).
- If they continue to exist, we will leak all BF backups, including every private message, emails, IP addresses, posts, etc.
- We have exploits for all MyBB 1.8 versions.
Disclaimer: This post is based on public claims made by the ransomware group "shinyhunters". I cannot confirm the accuracy of the information. However, I would be happy to share any official statement from the affected organization to provide clarification.