A database containing registration information of 478,000 members of the now-defunct RaidForums hacker forum has been leaked on a new cybercriminal forum called ‘Exposed.’
Since its inception in 2015, RaidForums has been a popular marketplace for cybercriminals to buy and sell data obtained from data breaches, including credit cards, bank account numbers and routing information, and the usernames and associated passwords needed to access online accounts.
The platform was shut down by law enforcement authorities in April 2022, a result of a global police operation called “TOURNIQUET.” As part of the operation the forum’s administrator and two of his accomplices were arrested. The US Department of Justice unsealed criminal charges against RaidForums’ founder and chief administrator, Diogo Santos Coelho who was arrested in the UK on January 31, 2022, at the request of the US authorities and remains in custody pending the resolution of his extradition proceedings.
After RaidForum’s demise users moved to BreachForums, another hacker forum to buy and sell stolen data. However, BreachForums shut down in March 2023 following the arrest of the site’s main administrator.
Earlier this month, a forum called 'Exposed' emerged as a replacement for RaidForums and BreachForums and has been quickly gaining popularity. Now, a forum’s admin who goes online as ‘Impotent’ has published the RaidForums member database containing the registration information for 478,870 of the site’s users who registered between March 20, 2015, and September 24, 2020.
According to BleepingComputer, the leaked data includes usernames, email addresses, hashed passwords, registration dates, and a variety of other information related to the forum software.
Exposed’s admin says that some RaidForums members have been removed from the database and it’s unclear when and why the damp was originally created.