Spam to registered email address

Do not post support requests, bug reports or feature requests. Discuss phpBB here. Non-phpBB related discussion goes in General Discussion!
Suggested Hosts
Post Reply
Registered User
Posts: 20
Joined: Sun Nov 14, 2004 3:27 pm

Spam to registered email address

Post by Protopia » Mon Feb 06, 2012 9:51 am

Dear Admins

Today I received a spam email addressed specifically to the unique email address I use only at

Somehow, this unique email address that should only be known by the database which runs the web site has got out into the big wide world.

Whilst I am not particularly concerned about this email address being known, it does raise some questions in my mind as to whether the user database has somehow been compromised.

And if this is the case, have passwords been compromised also?

Perhaps someone could look into this please.

Many thanks.


User avatar
Support Team Leader
Support Team Leader
Posts: 10335
Joined: Mon Jun 27, 2005 8:41 pm
Location: Texas, USA
Name: Patrick Webster

Re: Spam to registered email address

Post by Noxwizard » Mon Feb 06, 2012 9:56 am

It is most likely from the incident three years ago: ... &t=1436615
The mailing list emails and our user table was published. Most accounts already had their passwords converted to the phpBB3 hashing scheme, but if this is your first time logging in prior to February of 2009, then there is a possibility that the password was still stored as an md5.
[Support Template] - [Read Before Posting] - [phpBB Knowledge Base]
Do not contact me for private support, please share the question in our forums.

Post Reply

Return to “phpBB Discussion”