+- Hack Forums (https://hackforums.net)
+-- Forum: Hacks, Exploits, and Various Discussions (https://hackforums.net/forumdisplay.php?fid=45)
+--- Forum: Whitehat • Blue Team • Defensive Security (https://hackforums.net/forumdisplay.php?fid=448)
+---- Forum: OpSec and OSINT (https://hackforums.net/forumdisplay.php?fid=322)
+---- Thread: on emails that have been "pwned" how would one gain access to the logs/data breaches? (/showthread.php?tid=6308104)
on emails that have been "pwned" how would one gain access to the logs/data breaches? - johndoeman805 - Sep 13, 2025
Like on haveibeenpawned. One can check their email address and see if it was "pwned." Sometimes the email address has been "pwned" and the website explains various data breaches. However how would one access the hacked data dump? Are there special websites to access this data? Can one find them on here? Does one usually have to pay for the harvested info? Hypothetically how much would that type of data cost?
RE: on emails that have been "pwned" how would one gain access to the logs/data breaches? - CL1B - Sep 13, 2025
So, when a company refuses to pay a ransomware/hack group the ransom or calls it bluffs they'll often release it on darkweb forums. I can't mention the names, but if you follow some in depth reports/blogs on recent ransomware attacks you'll quickly find them yourself. This is where big breaches (luckily in today's ago only snippets are released as proof of data theft) are both published and eventually wiped from, the rest is just a chain reaction.
When CCs do large scale "logging" they'll often have their own infrastructure or they'll sell them as "logs" on similar forums and marketplaces on both the clear and darkweb.
Haveibeenpwned and similar service mainly keep tabs on that first one, for obvious reasons.
RE: on emails that have been "pwned" how would one gain access to the logs/data breaches? - johndoeman805 - Sep 13, 2025
(Sep 13, 2025 04:11 PM)MarlboroMan Wrote: So, when a company refuses to pay a ransomware/hack group the ransom or calls it bluffs they'll often release it on darkweb forums. I can't mention the names, but if you follow some in depth reports/blogs on recent ransomware attacks you'll quickly find them yourself. This is where big breaches (luckily in today's ago only snippets are released as proof of data theft) are both published and eventually wiped from, the rest is just a chain reaction.
When CCs do large scale "logging" they'll often have their own infrastructure or they'll sell them as "logs" on similar forums and marketplaces on both the clear and darkweb.
Haveibeenpwned and similar service mainly keep tabs on that first one, for obvious reasons.
very informative👍 however why are you not allowed to mention darkweb forums on here? is it illegal to post darkweb links? sure a lot of pedophiles/illegal drugs and other illegal stuff on the darkweb but is it illegal for one to access forums that post breached databases? (i want to know the legality just curious👍)
RE: on emails that have been "pwned" how would one gain access to the logs/data breaches? - HerrWinston - Sep 14, 2025
(Sep 13, 2025 05:44 PM)johndoeman805 Wrote: very informative👍 however why are you not allowed to mention darkweb forums on here? is it illegal to post darkweb links? sure a lot of pedophiles/illegal drugs and other illegal stuff on the darkweb but is it illegal for one to access forums that post breached databases? (i want to know the legality just curious👍)
No its not really that, in the rules and etiquette a rule is to not name other forums especially not these who compete with HackForum :)
RE: on emails that have been "pwned" how would one gain access to the logs/data breaches? - Err0rX - Sep 14, 2025
(Sep 13, 2025 03:55 PM)johndoeman805 Wrote: Like on haveibeenpawned. One can check their email address and see if it was "pwned." Sometimes the email address has been "pwned" and the website explains various data breaches. However how would one access the hacked data dump? Are there special websites to access this data? Can one find them on here? Does one usually have to pay for the harvested info? Hypothetically how much would that type of data cost?
When a company is hacked, the person behind the leak will decide if they are going to publish the information or not. If they do, the website Have I Been Pwned will notify you of publicly collected information and if your email or account was compromised. They do not actually provide the stolen information; they simply note the breach.
In reality, it is all based on publicly available information, so there is nothing illegal.
RE: on emails that have been "pwned" how would one gain access to the logs/data breaches? - DramaKing - Sep 14, 2025
This is a legitimate forum. It's because of rules like "DO NOT DISCUSS BREACHES" that HF has not been raided like forums that did allow this. Admin cooperates with law enforcement, which is why he hasn't been arrested.
RE: on emails that have been "pwned" how would one gain access to the logs/data breaches? - Gucio260608 - Sep 14, 2025
(Sep 13, 2025 03:55 PM)johndoeman805 Wrote: Like on haveibeenpawned. One can check their email address and see if it was "pwned." Sometimes the email address has been "pwned" and the website explains various data breaches. However how would one access the hacked data dump? Are there special websites to access this data? Can one find them on here? Does one usually have to pay for the harvested info? Hypothetically how much would that type of data cost?
You generally will not be able to download full hacked data dumps through legitimate services since sharing that material directly would be illegal. But you can use sites like dehashed.com which index breach records and let you search to see if your information appears (which is somehow legal I believe).
RE: on emails that have been "pwned" how would one gain access to the logs/data breaches? - vetbesim - Sep 15, 2025
try use breach.vip
RE: on emails that have been "pwned" how would one gain access to the logs/data breaches? - RowdyCat - Sep 15, 2025
(Sep 15, 2025 03:42 PM)vetbesim Wrote: try use breach.vip
thank you brother very good site
RE: on emails that have been "pwned" how would one gain access to the logs/data breaches? - maxtac - Sep 28, 2025
Yes you can use OathNet.org to access the breached data to secure whats has been exposed