Skip to content

CrimeAgency vBulletin Hacks

Disclosed Mar 21, 20179 years ago942,044 accountsUnverified

In January 2016, a large number of unpatched vBulletin forums were compromised by an actor known as "CrimeAgency" . A total of 140 forums had data including usernames, email addresses and passwords (predominantly stored as salted MD5 hashes), extracted and then distributed. Refer to the complete list of the forums for further information on which sites were impacted.

What is known

People affected942,044 (accounts in the leaked data, per Have I Been Pwned)
DisclosedMar 21, 2017
HappenedJan 19, 2017
AttackNot stated
Data exposedEmails, Passwords
SectorTech
StatusUnverified: not yet confirmed by an official notice, a filing or the organization
Check your emailHave I Been Pwned

Sources

Source
Have I Been Pwned: CrimeAgency vBulletin Hackshaveibeenpwned.com · Aggregator

Notices filed

WhereFiledPeople
Have I Been Pwnedaccounts in the dataMar 21, 2017942,044
History of this record
  • 2026-09-25 · added · backfill source

First seen 2026-09-25 (Have I Been Pwned). Record counts are as reported. Not legal advice.

Everything about CrimeAgency vBulletin Hacks

New breaches by email

Wednesdays, only in weeks with newly disclosed breaches, the largest first.

Double opt-in. Unsubscribe any time.