NewAI pentesting that proves every finding
INSECUREWEB

Data Breach News2 min read

250M US Citizens’ Data Leaked on BreachForums

By InsecureWeb Team

This report reflects observations of dark web activity. InsecureWeb makes no representations regarding the accuracy of this data.

250M US Citizens’ Data Leaked on BreachForums

Data Breach Summary
On April 7, 2025, user DARK published a massive data dump on BreachForums containing 250,807,711 records, including 59 million unique email addresses. The data reportedly belongs to US citizens and exposes highly sensitive personal and household information.

Data Details

  • Full legal names
  • Residential addresses
  • Income and salary details
  • Property values
  • Number of dependents
  • Contact phone numbers
  • Email addresses (some linked to multiple accounts)
  • Number of pets
  • Numerous other data points (as listed in CSV headers)

Breach Size

  • Compressed: 24.5 GB (3,139 files of ~8 MB each)
  • Uncompressed: 263 GB

Where & How
The leak was posted publicly on BreachForums by user DARK on April 7, 2025. Given its extensive household-level data fields, it likely originates from a data aggregator or broker storing large-scale US demographic and financial datasets.

About BreachForums
BreachForums is a well-known hacking forum facilitating the trade of compromised datasets. Despite multiple takedowns and recent admin arrests in 2025, it remains active under new leadership

Company Data Breach History
No direct company attribution or prior breaches have been publicly confirmed for this dataset. News outlets have not yet reported this specific leak, but similar data broker exposures have occurred in the past.

Further Action

  • Conduct forensic analysis to identify the leak source
  • Notify regulatory bodies if legally required (e.g. FTC, state AGs)
  • Prepare communication and protection measures for impacted individuals

Recommendations for Personal & Organizational Protection

  • Change all passwords to strong, unique combinations
  • Enable two-factor authentication on all accounts
  • Monitor credit reports, financial services, and personal data for misuse
  • Stay alert for phishing or impersonation attempts leveraging this data
  • Organizations should review exposure risks with data brokers and third parties

What is InsecureWeb?

InsecureWeb is a Dark Web monitoring service that keeps track of recent data breaches and tracks their impact by monitoring the darkest places of the internet.

Our commitment lies in providing top-notch cybersecurity services to our clients. Through continuous monitoring of the dark web and advanced threat detection methodologies, we strive to identify potential breaches promptly, enabling swift response and mitigation efforts. With our state-of-the-art tools and expertise, we prioritize the confidentiality, integrity, and availability of our clients’ data.

More breach reports