Every public data breach

44 disclosed this week · 26,355 on record

phpBB

Disclosed Feb 5, 2009400,000 affectedUnverified

Attacker takes phpBB.com user database of 400,000 via unpatched PHPlist bug

An attacker exploited an unpatched bug in the third party PHPlist email application to gain full access to phpBB.com's database of names, emails, addresses and hashed passwords for its entire user base, and the site was taken offline.

What is known

People affected400,000 (as reported by the organization)
DisclosedFeb 5, 2009
AttackHacking
Data exposedNamesEmailsAddressesPasswords
SectorTech · US
StatusUnverified: not yet confirmed by an official notice, a filing or the organization

Sources

Notices filed

History of this record
Added2026-09-25
First recordedby seedSource

First seen 2026-09-25 (Research). Record counts are as reported. Not legal advice.

Everything about phpBB