- A threat actor is offering what they claim is the full source code and database for BreachForums[.]st for $1,000 each, or both for $2,000, requesting payment in crypto, preferably Monero.
- The seller said the price is negotiable, and potential buyers can use a middleman, but there’s no evidence to prove the listing is genuine.
- This comes after years of drama around BreachForums, law enforcement takedowns, fights among the site’s admins, shuffled ownership, and earlier leaks.
A hacker put up what they described as the complete source code and database of BreachForums[.]st, one of the most famous cybercriminal forums, for sale.
As per the actor’s post, the source code is being sold at $1,000, while the database is $1,000 or alternatively both for $2,000. The vendor indicates that the prices are negotiable and that payments should be in cryptocurrencies, especially Monero (XMR). They further indicated that a trustworthy middleman may also be used in making the payments.
As of this writing, there is no evidence that the vendor is actually in possession of the advertised files. Also, there’s no report of any recent compromise of the current BreachForums infrastructure.
Authenticity of the Listing Remains Questionable
Listings related to hacked databases and source codes are frequent in underground forums. However, not all lead to a confirmed sale. Potential buyers face several risks. The offer could be an attempt to scam people or spread malware, or it could be from old backups.
It could also be old backup files, data from previous leaks, incomplete archives, or files that do not even exist. The same caution applies to other high-value source code claims, hackers have claimed and sold GamingSoft source code for $125,000.
There have been cases when hackers uploaded malware in place of the data they promised. Other times, they disappear after collecting payment, a tactic people commonly refer to as an exit scam.
This information seems particularly important as BreachForums has faced several challenges – law enforcement takedowns, ownership disputes, and rival sites springing up in recent years.
BreachForums’ Background and Takedowns
BreachForums’ history is a chaotic one. The original site emerged after the closure of RaidForums in 2O22. It quickly became a preferred platform for criminals trading stolen data.
In March 2O23, U.S. authorities arrested BreachForums founder Conor Brian Fitzpatrick, aka ‘Pompompurin’ leading to a three-year prison. After Fitzpatrick’s arrest, BreachForums got several new administrators appearing and disappearing through the years. The site repeatedly changed domains.
2O24 and 2O25 saw versions of BreachForums come and go. Sometimes they went offline due to disruption by law enforcement. Other times, the operators abandoned the sites because of disagreements.
In April 2O25, the admins pulled the plug after they started to believe law enforcement had used a zero-day bug in MyBB software to break in. By August that year, another version vanished, but this time, rumors spread that international law enforcement had taken control.
By now, BreachForums is basically a symbol of instability. The forum witnessed a data leak on January 2O26 which exposed information on 324,000 users. All these make it hard to tell what data is actually authentic.
Previous Claims and Data Leaks Surrounding BreachForums
This isn’t the first time someone has attempted to sell BreachForums’ infrastructure. Back in 2O25, similar ads surfaced, offering the same database and source code for the same price tag.
Researchers questioned those adverts because of too many inconsistencies. And nobody could really connect the sellers to the real BreachForums admins.
Moreover, BreachForums itself has a messy history with leaks, too. Someone dumped a database from an earlier version in 2O24. Fast forward to August 2O25, and another leak exposed user accounts from a newer version of the forum. So, even if this latest seller has actual files, chances are the info’s either outdated or already floating around out there.
A lot of researchers believe scammers are just exploiting the BreachForums name to gain recognition or attract buyers. A popular brand like BreachForum is an easy magnet for buyers hunting for exclusive data or access to the darker corners of the web.
Plausible Response to the Latest Claims
So what’s the smart move here? Be skeptical. Sure, a legitimate BreachForums database could matter a lot to researchers, law enforcement, or even rival criminals. There’s potential to uncover admin activities, user connections, private messages, etc. But let’s be real: you can’t actually verify what’s for sale just by looking at a marketplace listing.
With all the fake revivals, ownership disputes, and outright scams that have targeted BreachForums’ own members, extreme caution is crucial. Until real proof emerges, treat the latest ad as just another unverified claim. In this world, staying skeptical isn’t just smart, it’s essential.
