Database from hacker community Cracked.to posted at rival site Raidforums, leaking users' IPs, email addresses, and DMs, many of which shared software exploits
Dan Goodin / Ars Technica : Tweets: @campuscodi and @thirdemily Tweets: Catalin Cimpanu / @campuscodi : The last time something like this happened, PoodleCorp/LizardSquad members ended up in prison https://twitter.com/... Emily Wilson / @thirdemily : In case you were wondering how blatantly the fraud economy operates, one of the biggest data dump sites is posted up - and has been - at a casual .com domain. https://arstechnica.com/...
Context & Ripple Effects
Data-dump sites keep operating in plain sight — Emily Wilson notes one of the biggest runs at a casual .com domain — but they have a history of being taken down: the LeakedSource archive of 3.1B+ compromised passwords went offline after an alleged police raid in 2017.
This leak inverts that dynamic: instead of authorities seizing a dump site, Raidforums is publishing a rival hacking community's own member data. The precedent for where this leads is the FBI's use of a leaked OGUsers forum database to track down the Twitter hackers — leaked forum data has already become an investigative resource.
First-order effects
- Cracked.to members are directly exposed: their IPs, email addresses, and DMs — many containing shared software exploits — are now searchable by anyone on Raidforums, de-anonymizing a community built on pseudonymity.
- Raidforums gains a competitive weapon against a rival forum, drawing its user base and demonstrating it can publish what competitors would rather keep private.
Second-order effects
- Law enforcement gets a ready-made evidence trove: following the OGUsers precedent, investigators can mine the leaked DMs and exploit discussions to identify and prosecute Cracked.to members, echoing the earlier cases where PoodleCorp and LizardSquad members ended up imprisoned.
- Exploit-sharing activity across similar forums likely chills — members who saw Carding Mafia's ~300K users exposed in a later hack have repeated proof that trading stolen data means archiving it somewhere leakable.
Third-order effects
- If the pattern holds, inter-forum leaks become a standing feed for cybercrime investigations, shifting enforcement away from costly infiltrations toward simply waiting for rivals to dox each other.
- The underground faces a structural trust problem: every forum is simultaneously a marketplace and a future breach victim, pushing criminal communities toward tighter operational security or fragmentation into smaller cells.
The trend: Cybercrime forums are becoming self-incriminating archives, with rival communities' leaks increasingly serving as raw material for law enforcement identification and prosecution.