Revealing millions of records on the Moltbook forum: how to protect your account

Moltbook Forum, a platform dedicated to discussions about artificial intelligence, has fallen victim to a serious security incident due to misconfiguration of its database. This breach has prompted millions of users to review the status of their accounts, as the compromised data could pose a significant threat to their online security.

Scope of the Leak: What Exactly Was Disclosed

A total of 4.75 million data records were exposed. According to PANews, this leak includes critically sensitive information such as:

• 1.5 million API authorization tokens
• 35,000 unique user email addresses
• 20,000 records with associated information
• Some secret API keys from OpenAI

This amount of compromised data indicates a serious security breach, as each type of information can be exploited for unauthorized access.

What User Data Was Compromised

The most concerning aspect is the leak of authorization tokens, which allow malicious actors to gain direct access to accounts without knowing passwords. OpenAI API keys pose a particular threat, as they can be used to access powerful AI tools and incur additional costs on compromised accounts.

Email addresses and related records can be used for phishing and targeted social engineering attacks.

Step-by-Step: How to Protect Your Keys and Passwords

Users are advised to take immediate action:

1. Change your account password — promptly set a new, strong password for the forum and related services
2. Regenerate API keys — if you used APIs, immediately regenerate all keys in your account settings
3. Review active sessions — check the list of active connections and close suspicious sessions
4. Enable two-factor authentication — activate 2FA on all important accounts linked to OpenAI and other services
5. Monitor financial accounts — carefully track credit card usage and API expenses

Conclusion: Protecting Your Data Is an Urgent Priority

The data leak on Moltbook serves as a reminder of the importance of constant vigilance in the digital world. Whether you are an active forum user or not, it is essential to review the security of all accounts associated with this platform, as well as to evaluate your overall password and API key management practices.