This breach is not of Zone Alarm but rather of its forum which should serve as a reminder that no subdomain or public-facing asset should be considered low risk. Forums, in particular, are often not provided with the same level of security as main websites and therefore are often targeted by cyber criminals. While there may not be payment information on such forums, at the very least, they will have email addresses and passwords which criminals can use to try and access other accounts associated with that user in what is known as 'credential stuffing' attacks that rely on users reusing the same password across different accounts. Passwords are also used in scam emails which are sent to users containing their password which claim that the users have been hacked and demands a payment in return for not sharing personal and embarrassing details.  Read Less