YouHack data breach: 7.2M accounts exposed
Severity: high · Patch status: no-fix-needed · Since 2013-05-29
In May 2013, the Russian-language hacking forum YouHack suffered a data breach that was later redistributed as part of a larger corpus of data. The breach exposed 107k forum members' email addresses, usernames, IP addresses and MD5 password hashes, most of which were unsalted. Forum posts also contained email address and password pairs belonging to other victims, bringing the total to 7.2M unique email addresses. Exposed data: email addresses, ip addresses, passwords, usernames. The breach dates from May 29, 2013; Have I Been Pwned loaded it on Nov 11, 2026.
What to do
- If you had a YouHack account, change its password and the password of any other account that reused it.
- Turn on multi-factor authentication wherever it is offered.
- Check whether your addresses are in this breach at https://haveibeenpwned.com.
- Expect targeted phishing that quotes the leaked details; verify any unexpected contact out of band.
Sources
All live incidents on Threat Watch
