Thanh Hóa FC Forum Alleged Data Exposure
The 2019 Thanh Hóa FC Forum data breach occurred in November 2019 when the fan community forum of Vietnamese professional football club Đông Á Thanh Hóa FC (forum.thanhhoafc.vn) was compromised and leaked on cybercrime forums.
Exposed Data Types
4- Email addresses
- Usernames
- Passwords
- IP addresses
About This Record
What information was affected in the Thanh Hóa FC Forum incident?
Threat actors exploited the high-severity CVE-2019-16759 remote code execution vulnerability in the vBulletin platform to exfiltrate database records. The breach impacts 338,240 unique accounts and includes:
- Authentication Credentials: Valid canonical email addresses, member usernames, and vBulletin password hashes with per-user cryptographic salts.
- Network Identifiers: Member registration and session IP addresses.
How many accounts were affected?
Rigorous canonical RFC extraction and deduplication across 339,363 database records confirmed 338,240 unique valid email addresses.
Technical analysis and security risks
The incident leveraged unauthenticated PHP code injection (CVE-2019-16759) affecting unpatched vBulletin forum instances. Salted MD5 password hashes are vulnerable to accelerated hash cracking, exposing users to credential stuffing attacks across external platforms.
Recommended actions for affected users
Former members of the Thanh Hóa FC community forum should:
- Update credentials on any existing services where passwords matching forum registrations were used.
- Be cautious of spear-phishing or spam campaigns targeting Vietnamese football community members.
Verification and editorial method
LeakData compares the incident name, date, affected-record count, and exposed data types with accessible sources. Unverified fields are not presented as facts, and records are updated when new evidence becomes available.
Report missing or incorrect information
