On October 13, 2026, leaksear.ch indexed 2,445 Sky-Hack.ru forum/CMS account records exposing emails, usernames, password hashes, IP addresses, names, and profile metadata (leaksear.ch metadata). No breach date is listed for the dataset (leaksear.ch metadata).
What happened
Public sources located for this article did not confirm how the Sky-Hack.ru account data was obtained. An older Russian-language Pikabu post described Sky-Hack.ru as a forum domain tied to an alleged prepayment-scam complaint, but that post does not report a database breach or an intrusion method (pikabu.ru).
The leaksear.ch indexing metadata identifies the material as forum/CMS account data, not as scraped public pages or a confirmed ransomware leak (leaksear.ch metadata). The exposure method, initial access vector, and breach date remain unconfirmed (leaksear.ch metadata).
What data was exposed
The searchable fields indexed by leaksear.ch are email, hashedPassword, ipAddress, name, and username (leaksear.ch metadata).
Stored, non-searchable fields include account and forum profile data such as mail preferences, allowed IP fields, ban and restriction flags, forum post, topic and thanks counts, warning counts, favorites, ICQ, profile info, location field, signature, user group, user ID, reputation fields, registration date, last activity date, birthday components, private-message counts, a profile photo field, xfields, and a secret_key field (leaksear.ch metadata). Those stored fields are record context, not direct search pivots in the metadata (leaksear.ch metadata).
Why this matters
Email, username, and name fields give phishers enough context to send account-themed messages that look tied to Sky-Hack.ru or other forums, especially when the same handle is reused elsewhere (leaksear.ch metadata). HashedPassword entries are not plaintext passwords, but cracked or reused passwords can still create account-takeover risk, and the FTC advises users to change any password reused on other accounts after a breach (consumer.ftc.gov). IP address, registration, and last-activity metadata can help an attacker tailor login alerts, reset lures, or location-based social-engineering messages to affected users (leaksear.ch metadata). Security teams should monitor for phishing and credential-stuffing against identities tied to the exposed emails and usernames, since CISA warns that exposed usernames, emails, and password material are commonly used for phishing, credential-based campaigns, and resale (content.govdelivery.com). If you used Sky-Hack.ru or reused a forum password, check whether your email, username, name, IP address, or hashed password appears in this leak so you can prioritize password changes and phishing monitoring (leaksear.ch metadata).
Check your exposure
Request access to check this leak source, or sign in if you already have an account. You can search it by email, hashed password, ip address, name, and username.