Was 4Chan really hacked?

[Oh_hunnihunni]

Did this actually happen? Is the sane world actually fighting back? 

https://www.instagram.com/reel/DIygAMfxu..._copy_link

[king1]

those posts look like there from abou 4 weeks back, surely it would have been on MSM if that was the case

[zqwerty]

I knew there were rumours that they had been hacked a couple of weeks ago.

[king1]

This seems like some reasonably specific details 

Answer: In brief, a splinter site from 4chan called Soyjak Party was hacked hacked 4chan via a method that wasn't social engineering (confirmed by the guy who leaked the source code). All the site staff including moderators, admins and "janitors" emails were leaked and they are being doxed as I type. 4chan is currently down because between the source code being leaked and a major security vulnerability being exploited, they have to keep it down or else it will just happen again.
Soyjak Party is the remnants of a board called /qa/, which was originally a place to discuss more site specific topics but it eventually evolved/devolved in to a Soyjak factory with a very distinct culture. They raided /lgbt/ back in 2021 I believe and the moderators permanently locked the board in response, not realizing it's a better option to keep a chaotic element contained in a place you have control over.
Edit: I forgot to mention things that had been leaked: the aforementioned staff emails, a private board for staff discussion, a view of the moderation tools which confirms that being banned will have two reasons, one that you will see and one that only staff will see, and the source code. The source code reveals that 4chan aggressively attempts to fingerprint your browser. One thing that has not and apparently will not be leaked is the info on users who pay for 4chan pass, as the hacker says it was "just for fun."
Edit 2: Just found a post from the guy who did it which says:
"Contrary to popular belief, it was not SQL injection.
The exploit is such:
4chan allows uploading PDF to certain boards (/gd/, /po/, /qst/, /sci/, /tg/)
They neglected to verify that the uploaded file is actually a PDF file. As such, PostScript files, containing PostScript drawing
commands, can be uploaded.
Said PostScript file will be passed into Ghostscript to generate a thumbnail image.
The version of Ghostscript that 4chan uses is from 2012, so it is trivial to exploit.
From there, we exploit a mistaken suid binary to elevate to the global user."
He also reaffirms that he didn't even bother looking at user data while he had access, so no passholder leaks.
https://www.reddit.com/r/OutOfTheLoop/co...and_going/