[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f1mszr58wyjdiz":3},{"success":4,"breach":5},true,{"_id":6,"name":7,"title":8,"slug":9,"domain":10,"breachDate":11,"addedDate":12,"publishedAt":13,"modifiedDate":14,"contentUpdatedAt":13,"source":15,"sourceUrl":16,"sourceUrls":17,"pwnCount":20,"affectedCount":20,"affectedCountStatus":21,"affectedCountLowerBound":13,"affectedCountUnit":22,"hasEnglishDescription":4,"contentLocale":23,"availableLocales":24,"translations":26,"severity":29,"dataClasses":30,"description":35,"seoTitle":36,"seoDescription":37,"logoUrl":38,"isVerified":4,"isSensitive":39,"isSpamList":39,"isMalware":39,"company":40},"6aad36dbb5d08a6c52928d7e","LucasForums 2016","LucasForums Data Breach","lucasforums-2016","lucasforums.com","2016-05-01T00:00:00.000Z","2026-09-18T13:04:26.803Z",null,"2026-09-19T17:05:04.279Z","LucasForums LucasArts gaming community vBulletin database breach","https:\u002F\u002Fwww.lucasfilm.com\u002F",[16,18,19],"https:\u002F\u002Fsynscan.net\u002F","https:\u002F\u002Fransomlook.io\u002F",151400,"known","unknown","en",[23,25],"tr",{"en":27,"tr":28},{"slug":9},{"slug":9},"High",[31,32,33,34],"Email addresses","Usernames","Passwords","IP addresses","\u003Cp>\u003Cstrong>The 2016 LucasForums data breach\u003C\u002Fstrong> occurred in May 2016 when the vBulletin forum database of \u003Cstrong>LucasForums\u003C\u002Fstrong> (\u003Ccode>lucasforums.com\u003C\u002Fcode>), the historic modding and gaming community dedicated to LucasArts and Star Wars video games, was compromised and published online.\u003C\u002Fp>\u003Ch2>What information was affected in the LucasForums incident?\u003C\u002Fh2>\u003Cp>The leaked membership dump (\u003Ccode>Lucasforums.com_VB_MAY_2016.txt\u003C\u002Fcode>) captures decades of forum history across titles such as Star Wars: Knights of the Old Republic, Jedi Knight, Monkey Island, and Grim Fandango. The incident compromised records for \u003Cstrong>151,400 unique community members\u003C\u002Fstrong>, exposing:\u003C\u002Fp>\u003Cul>\u003Cli>\u003Cstrong>Account Identifiers:\u003C\u002Fstrong> Discussion forum usernames.\u003C\u002Fli>\u003Cli>\u003Cstrong>Contact Credentials:\u003C\u002Fstrong> Canonical email addresses across network domains (including LFNetwork) and global mail providers.\u003C\u002Fli>\u003Cli>\u003Cstrong>Authentication Secrets:\u003C\u002Fstrong> Salted MD5 password hashes and per-user cryptographic salts.\u003C\u002Fli>\u003Cli>\u003Cstrong>Network Telemetry:\u003C\u002Fstrong> User IP addresses logged during activity.\u003C\u002Fli>\u003C\u002Ful>\u003Ch2>How many accounts were affected?\u003C\u002Fh2>\u003Cp>Rigorous RFC canonical parsing and deduplication confirmed \u003Cstrong>151,400 unique valid email addresses\u003C\u002Fstrong>.\u003C\u002Fp>\u003Ch2>Technical analysis and security risks\u003C\u002Fh2>\u003Cp>Attackers exploited vulnerabilities in the unpatched vBulletin installation to dump the core user tables. Salted MD5 hashes offer insufficient modern resistance to GPU-assisted cracking, posing severe credential-stuffing risks against gaming profiles, Steam accounts, and secondary email addresses.\u003C\u002Fp>\u003Ch2>Recommended actions for affected users\u003C\u002Fh2>\u003Cp>Former members of LucasForums should:\u003C\u002Fp>\u003Cul>\u003Cli>Promptly update passwords across any active gaming services or email accounts where their old forum password was reused.\u003C\u002Fli>\u003Cli>Enforce two-factor authentication (such as Steam Guard or authenticator apps) across all gaming and storefront platforms.\u003C\u002Fli>\u003C\u002Ful>","LucasForums Data Breach (151.4 Thousand Reported Records)","LucasForums Data Breach. 151.4 Thousand reported records are reported. Reported data: Email addresses, Usernames, Passwords. Review the scope, risks, and…","\u002Fuploads\u002Flogo\u002Flucasforums.webp",false,{"name":41,"sector":42,"country":43,"website":43,"websiteArchiveUrl":43,"websiteStatus":43,"websiteCheckedAt":13},"LucasForums","Online Community",""]