Data from a 2013 breach of the YouHack cybercrime forum has resurfaced online, exposing 7.2 million email addresses and password pairs as first reported by Tech Radar.
The leaked archive, which recently appeared on the Have I Been Pwned service, contains sensitive information including usernames, IP addresses and weakly protected MD5 password hashes. Researchers warn that while the breach is over a decade old, the data remains a significant security risk. Many of the passwords were stored as unsalted MD5 hashes, a cryptographic method now considered insecure and easily reversible by modern hardware. Because individuals often reuse passwords across multiple platforms, these credentials remain valuable for credential-stuffing and account takeover attacks. The incident is part of a broader trend of historical breach data reappearing, often bundled into larger collections. This discovery coincides with a separate leak involving 48 million records from the Sberbank loyalty program, which has been attributed to hacktivist groups amid ongoing geopolitical tensions. Security experts emphasize that the persistence of such data highlights the critical need for robust password management and the avoidance of password reuse across different online services.
Source: Tech Radar
