2026 bf.st — full codebase and database offered for sale (unverified)
Data compromised
Actor claim (unverified): full codebase + DB (128 tables) including usernames, emails, password values/salts, login keys, profile/PM/2FA/security-question fields
Technical writeup
Unverified source-code + database sale — Dark Web Informer September 16, 2026. Actor mrwho offered alleged full bf.st forum codebase and database (128 tables shown), claiming compromise around late May/early June 2026 via a forum-implementation flaw at launch. Operator confirmation and user census not located. recordsAffected 0; companyConfirmed false.
Root cause
Unverified forum sale (actor mrwho) claiming late May/early June 2026 forum-implementation vulnerability during site launch