# 2013 breach at Russian cybercrime forum resurfaces with millions of victims’ credentials

- URL: https://talkfuse.com/story/2013-breach-at-russian-cybercrime-forum-resurfaces-with-millions-of-victims-credentials/
- Published: 2026-11-11T13:28:00+00:00
- Updated: 2026-11-11T15:21:12+00:00
- Original publisher: The Register
- Original article: https://www.theregister.com/cyber-crime/2026/11/11/2013-breach-at-russian-cybercrime-forum-resurfaces-with-millions-of-victims-credentials/5309065
- Topics: Cybersecurity, Europe, Technology, World

## Key points

- YouHack’s 2013 breach exposed 7.2 million email addresses.
- Around 107,000 were linked to forum members.
- HIBP also catalogued 48 million SberSpasibo records.

## Summary

A 2013 breach of Russian-language cybercrime forum YouHack has been added to Have I Been Pwned, exposing 7.2 million unique email addresses. The records include login details for forum members and credentials they had shared about other people, illustrating how a breach can affect people beyond the site’s users.

About 107,000 addresses belonged to YouHack members; their exposed details included usernames, IP addresses and mostly unsalted MD5 password hashes, which are weak protection. The data was later included in the 2024 “Mother of all Breaches”, a 12-terabyte collection containing 26 billion records from multiple incidents. Separately, HIBP reported that a 2023 breach of Sberbank’s SberSpasibo loyalty programme contained 48 million user records, including 3.3 million email addresses.

---
Summarised by TalkFuse (https://talkfuse.com/). Quote the original publisher for the reporting and link this page for the summary and discussion.