Zilvia.net Forum Breach Exposes 288 K Email Addresses, Usernames, IPs, and Password Hashes
What Happened — In November 2025, the Zilvia.net Nissan 240SX Silvia and Z Fairlady car forum suffered a data breach. Attackers extracted 287,863 user records containing email addresses, usernames, IP addresses, and salted MD5 password hashes from the vBulletin‑based platform. The site did not respond to inquiries about the incident.
Why It Matters for Trust & Control Assurance
- Demonstrates the risk of relying on third‑party platforms that may lack up‑to‑date security patches or robust password‑storage practices.
- Highlights the need for continuous monitoring of vendor controls and evidence collection to prove due‑diligence during audits.
- Underscores the importance of documenting and validating third‑party risk‑management processes as part of a defensible control‑assurance program.
Who Is Affected — Automotive enthusiast forums, online community platforms, and any organization that integrates third‑party forum software.
Recommended Actions
- Map this incident to the control objective of “Vendor risk management and continuous monitoring of third‑party services.”
- Collect evidence of vendor security assessments, patch management, and password‑hashing standards.
- Validate that your own access‑control policies require vendors to use strong, salted hashing (e.g., bcrypt, Argon2) and to remediate known platform vulnerabilities promptly.
Technical Notes — The breach originated from a vBulletin‑based forum, a platform historically affected by remote code execution and authentication bypass vulnerabilities. Exposed data includes email addresses, usernames, IP addresses, and salted MD5 password hashes. Source: [Have I Been Pwned – Zilvia.net breach]