
The imageboard 4chan has fallen victim to a large-scale cyberattack, with responsibility claimed by members of the anonymous forum Soyjak.party, also known as The Party.
According to the attackers, the operation—codenamed “soyclipse”—had been in planning for over a year and was executed on April 14, 2025. The breach resulted in the public release of screenshots from administrator panels, source code, and user ban templates—tools accessible only to 4chan moderators. Additionally, a list of alleged moderators and so-called “janitors”—volunteer assistants with limited privileges—was leaked. TechCrunch managed to contact several individuals whose details had been exposed. One janitor confirmed the authenticity of the leaked data and screenshots, stating, “I have no reason to believe otherwise.” He also speculated that the attackers may have gained access to information pertaining to 4chan Pass subscribers—a paid tier that grants users additional privileges and access to restricted sections of the site.
The screenshots were shared in a thread on Soyjak.party, accompanied by a message from a user operating under the pseudonym Chud: “Tonight is special. A hacker embedded within 4cuck for over a year has executed the true soyclipse.”
According to those involved in the breach, the forum’s administrators shut down servers in an attempt to contain the damage. However, unverified reports suggest the servers were entirely compromised.
The intrusion is believed to have been facilitated by an outdated version of PHP, dating back to 2016, riddled with known vulnerabilities—likely exploited by the attackers to gain access.
Founded in 2003 by Christopher Poole (also known as moot), 4chan has earned notoriety over two decades as a hub for data leaks affecting major corporations, including Microsoft, Intel, Twitch, and Disney. It has also been the birthplace of internet phenomena such as Pepe the Frog, Wojak, and the QAnon movement—a conspiracy-driven community known for its fervent support of Donald Trump.