More than 158,000 sets of account details from the user forums of Internet-TV software maker Boxee are currently circulating online after a data breach sometime last month. The leaked data consists of 158,128 individual user accounts, including about 172,000 email addresses, plus user names and cryptographically scrambled passwords, researchers told the tech blog Ars Technica. Worse, the leaked data also includes the IP addresses and birthdates of users, as well as message archives and past password changes. Before the company was bought by Samsung in 2013, it partnered with D-Link to make a set-top box, called a Boxee Box, that came with several apps, including Netflix, Vudu, YouTube and Pandora, and could also be used to watch over-the-air programming and record shows to a cloud-storage service.