The OpenWrt project has revealed that an attacker has managed to access information about its online forum users over the weekend. An intruder was able to download a copy of the user list that contains email addresses, handles, and other statistical information about the users of the forum. The main worry is that the intruder may use the user lists to send out phishing emails aimed at compromising the forum’s regular users, some of which work for companies that manufacture devices that can run (on) OpenWRT.
Source: https://www.helpnetsecurity.com/2021/01/19/openwrt-data-breach/