PicBackMan appears in a reported April 2026 database leak containing 38,767 indexed records. The dataset includes contact identifiers, password-related fields, IP addresses, device telemetry, and subscription/payment metadata.
A 2015 vBulletin breach exposed forum account data tied to more than 508,000 indexed records. The leak includes emails, usernames, IP addresses and MD5 password hashes with salts, creating ongoing credential and phishing risk.