Linux Forums Data Breach

What happened

In May 2018, the Linux Forums website suffered a data breach which resulted in the disclosure of 276k unique email addresses. Running on an old version of vBulletin, the breach also disclosed usernames, IP addresses and salted MD5 password hashes. Linux Forums did not respond to multiple attempts to contact them about the breach.

Exposed data

Recommended actions

• Change your Linux Forums password immediately, and update it anywhere you reused the same password.
• Enable two-factor authentication on the affected account and on your critical services (email, banking).
• Watch for targeted phishing emails referencing Linux Forums — attackers weaponise breach data quickly.
• Check whether your email address appears in this breach on haveibeenpwned.com.