A forum actor posting as 584 claims to be selling Fanlore.org account data after the Organization for Transformative Works self-reported an unauthorized access incident. The alleged leak includes about 145,000 email addresses, usernames, real names, password hashes, and authentication tokens, but the posted copy remains unverified. #Fanlore #OrganizationforTransformativeWorks #HaveIBeenPwned #MediaWiki
Keypoints
- Actor 584 claimed to post Fanlore.org account database data on a forum.
- OTW said it identified unauthorized access in August 2026 and self-reported the incident.
- The exposed data reportedly covers about 145,000 unique email addresses.
- The sample includes usernames, real names, password hashes, verification tokens, and authentication tokens.
- The published copy is unverified, but affected users should assume their wiki identity and email may be linked publicly.
DarkWebInformer.com Providing intel from some of the darkest places on the Dark Web & Clearnet. Breaches, Darknet Markets, Ransomware, Threat Alerts, & more!Read More: https://darkwebinformer.com/fanlore-wiki-accounts-circulating-after-otws-self-reported-breach/