leaksear.ch has indexed 7,487 user records from a leaked Black Market Reloaded user table, tied in the metadata to an October 17, 2013 breach date (leaksear.ch metadata). Black Market Reloaded was a darknet marketplace that public reporting described as a Silk Road successor, and the indexed records include account identifiers, profile metadata, GPG material, and Bitcoin addresses (leaksear.ch metadata) (dailydot.com).
What happened
On October 17, 2013, Daily Dot reported that Black Market Reloaded had abruptly shut down after founder Backopy said the market's source code was discovered and leaked by a hacker. That report said the site returned a database connection error and described uncertainty over whether the attacker had access to servers or databases (dailydot.com).
Public reporting on the mechanism was not uniform. Daily Dot reported Backopy's claim that a VPS administrator had apparently stolen and leaked the code, while CoinDesk later described a source-code publication error in which the site exposed parts of its own code and BMR then returned at a different address (dailydot.com, coindesk.com).
leaksear.ch metadata identifies the indexed material as a Black Market Reloaded user table with 7,487 records and a breach date of October 17, 2013. The market's instability continued after October, and The Guardian reported in December 2013 that BMR announced it would close because its admins considered the market too large to run safely after Sheep Marketplace collapsed (leaksear.ch metadata) (theguardian.com).
What data was exposed
The leaksear.ch indexing metadata lists the searchable pivots as cryptoAddress, email, name, and username. In plain English, that means cryptocurrency addresses, email addresses, stored names or aliases, and usernames can be searched on the platform (leaksear.ch metadata).
Other fields stored with the records include profile text, account type, feedback, GPG material and GPG timestamp, internal ID, last seen, and member since values. Those fields add context to the records, but the metadata does not list them as direct search pivots (leaksear.ch metadata).
The metadata does not list passwords or password hashes among the indexed or stored fields. It also does not list financial account numbers, government IDs, phone numbers, or postal addresses in this leak (leaksear.ch metadata).
Why this matters
Email addresses, usernames, and stored names can link pseudonymous BMR accounts to real-world identities when those identifiers were reused outside the market (leaksear.ch metadata). Bitcoin addresses can connect exposed accounts to historical blockchain activity, which can assist deanonymization even without passwords in the indexed fields (leaksear.ch metadata). Profile text, feedback, account type, and membership timestamps can give phishers credible details for targeted messages or impersonation attempts against people tied to the records (leaksear.ch metadata). The uncertainty reported in 2013 about possible server or database access means responders should treat the user-table exposure as historical identity and attribution risk, not as confirmed current account compromise (dailydot.com). Readers who used Black Market Reloaded or reused related identifiers should check leaksear.ch for their email, username, stored name, or crypto address.
Check your exposure
Request access to check this leak source, or sign in if you already have an account. You can search it by crypto address, email, name, and username.