The cybercrime marketplace BreachForums has experienced a significant data breach, compromising approximately 324,000 user accounts. The incident, which occurred in August 2025, exposed user email addresses, usernames, and Argon2-hashed passwords. This data was later posted online by an individual identifying as "James." The breach happened prior to law enforcement's takedown of the BreachForums domain in October 2025. Analysis of the leaked database by Resecurity indicates it contains records of individuals involved in cybercrime, including those previously linked to groups like GnosticPlayers, and PGP keys associated with handles such as ShinyHunters and IntelBroker. The forum's administrator, N/A, acknowledged the leak, attributing it to an unsecured folder used during the forum's recovery from the .hn domain, stating the data was not recent.