4chan Hack Exposed Staff and User Data, Disrupted Site for Over a Week
Summary
4chan went offline in April 2025 after a hacker reportedly accessed its backend. Reports described leaked source code, staff information, archived posts and 4chan Pass user data; the site later returned with apparent security changes.
Key points
- 4chan was disrupted from April 14, 2025, with service returning gradually after more than a week.
- Users on rival imageboard Soyjak[.]party claimed responsibility and said an intruder had accessed 4chan’s systems over a year earlier.
- The attackers claimed to have exfiltrated source code and user information, and temporarily restored a defunct board with a hacking message.
- Media reports said leaked material included staff information, archived posts, 4chan Pass subscriber data and PHP source code.
- The site’s administrators took servers offline during the incident; the article reports that 4chan later returned with apparent security improvements.
- A theory that outdated, unpatched software enabled the breach circulated at the time, but the article does not establish it as the cause.
Article Details
- Victim Organization
- 4chan
- Victim Domain
- 4chan.org
- Incident Type
- Unauthorized access and data breach, including website defacement, alleged data exfiltration, and service disruption.
- Incident Date
- 2025-04-14
- Disclosure Date
- 2025-04-14
- Data Types Exposed
- PHP source code
- Internal staff discussions and archived posts, possibly from private boards
- Staff email addresses and administrative information
- User information, including IP addresses and locations accessible through a moderator interface
- Email addresses associated with 4chan Pass subscribers
- Affected Records
- An index of one administrator and approximately 218 moderators and janitors was reported; hundreds of pages of archived posts were also reported. Total affected user records were not disclosed.
- Affected Data Size
- Not disclosed
- Operational Impact
- 4chan was taken offline on April 14 and remained unavailable or unstable for several days. It gradually returned online by April 16–17, with some users still encountering errors.
- Ransom Or Extortion
- None reported
- Claim Status
- alleged