Breach Intelligence

2,850

Total breached databases

In 2016, GamingDeluxe, a UK-based company specializing in game server hosting, allegedly suffered a data breach. GamingDeluxe is a UK-based company that provides game server hosting services for various multiplayer games. They specialize in hosting popular game servers and offering related gaming infrastructure services. Reports suggest that approximately 11,000 records were compromised. The exposed data includes email addresses, usernames, IP addresses, site activity, social profiles, websites, birthdates, and vBulletin encrypted passwords.
  • Data: Email Addresses Passwords Usernames IP Addresses Site Activity Social Profiles Websites Birthdates
  • Imported:
  • Records Imported: 11,461
  • Number of lines: 11,627
  • Size: 10.28 MB
  • Passwords: vBulletin
  • Cracked: 39%
In 2016, Frostland.pro allegedly suffered a data breach. Approximately 1,345,000 records were reportedly compromised, including email addresses, usernames, IP addresses, site activity, and passwords (both unsalted MD5 and MD5 with salt).
  • Data: Email Addresses Passwords Usernames IP Addresses Site Activity
  • Imported:
  • Records Imported: 1,345,030
  • Number of lines: 1,345,496
  • Size: 439.45 MB
  • Passwords: MD5, MD5 Salted
  • Cracked: 13%
In 2020, Skotos Forums allegedly suffered a data breach. Skotos Forums is associated with Skotos.net, a platform focused on text-based and storytelling online games. The forums serve as a community hub for discussing various games hosted on Skotos. Reports suggest that approximately 136,000 records might have been compromised, including email addresses, usernames, IP addresses, site activity, social profiles, and websites. It is also reported that passwords were potentially compromised, protected with hashing algorithms such as BCrypt and vBulletin.
  • Data: Email Addresses Passwords Usernames IP Addresses Site Activity Social Profiles Websites
  • Imported:
  • Records Imported: 136,087
  • Number of lines: 136,256
  • Size: 62.82 MB
  • Passwords: BCrypt, vBulletin
  • Cracked: 83%
In 2014, FiestaFan, a fan website dedicated to the online game Fiesta Online, allegedly suffered a data breach. FiestaFan was a fan website dedicated to the online game Fiesta Online. It provided game guides, forums, and resources for the gaming community. Reports suggest that approximately 14,000 records were compromised in the incident. The leaked data purportedly included email addresses, usernames, IP addresses, site activity details, social profiles, websites, birthdates, and encrypted passwords using vBulletin.
  • Data: Email Addresses Passwords Usernames IP Addresses Site Activity Social Profiles Websites Birthdates
  • Imported:
  • Records Imported: 14,050
  • Number of lines: 14,194
  • Size: 5.25 MB
  • Passwords: vBulletin
  • Cracked: 79%
In 2017, Extreme-Forum.net allegedly suffered a data breach. Extreme-Forum.net appears to be an online discussion forum, based on its domain name. This incident reportedly involved approximately 3,900 records. The allegedly compromised data includes email addresses, passwords, usernames, IP addresses, site activity, social profiles, and birthdates. The passwords involved were reportedly hashed using vBulletin.
  • Data: Email Addresses Passwords Usernames IP Addresses Site Activity Social Profiles Birthdates
  • Imported:
  • Records Imported: 3,922
  • Number of lines: 4,010
  • Size: 1.35 MB
  • Passwords: vBulletin
  • Cracked: 23%
In 2013, EnhanceViews, a service designed to increase views, subscribers, and interaction metrics on social media platforms such as YouTube, allegedly suffered a data breach. The website offered automated tools for users aiming to boost their online presence and visibility. Reports suggest that approximately 21,000 records were exposed in the breach, which included email addresses, usernames, passwords hashed using vBulletin, IP addresses, site activity, related websites, and birthdates.
  • Data: Email Addresses Passwords Usernames IP Addresses Site Activity Websites Birthdates
  • Imported:
  • Records Imported: 21,496
  • Number of lines: 21,592
  • Size: 9.12 MB
  • Passwords: vBulletin
  • Cracked: 30%
In October 2022, Doomworld, a website and online forum dedicated to the video game Doom, allegedly suffered a data breach that exposed approximately 35,000 records. The compromised data included email addresses, usernames, IP addresses, site activity, and bcrypt hashed passwords.
  • Data: Email Addresses Passwords Usernames IP Addresses Site Activity
  • Imported:
  • Records Imported: 34,939
  • Number of lines: 35,102
  • Size: 38.03 MB
  • Passwords: BCrypt
  • Cracked: 22%

Frequently Asked Questions

A data breach is unauthorized access to data (often involving account takeover, malware, or misconfigured infrastructure). A data leak is exposure of data due to mistakes like public cloud storage, open databases, or accidental publishing. A database dump is a packaged dataset that may come from a breach, leak, scraping, or aggregation.

Change passwords for any affected accounts immediately, prioritizing email, banking, and any account that shares the same password. Enable multi-factor authentication wherever possible. Monitor your accounts for suspicious activity and consider placing a fraud alert or credit freeze if financial data was exposed.

Start with containment and verification: confirm what data was exposed, identify the entry point, rotate credentials (especially SSO, VPN, email), and enforce MFA. Then investigate affected systems, notify stakeholders as required, and harden controls to prevent recurrence. A structured incident response plan helps keep the work measurable and compliant.

Dark web monitoring helps you spot exposure signals early — before stolen data is widely reused for account takeover or targeted attacks. Monitoring complements vulnerability management by revealing when attackers already have leverage. Pair it with continuous attack surface monitoring and strong Asset Discovery to reduce blind spots.

Not always. Some datasets are old, incomplete, or derived from third parties. However, any exposure increases risk because credentials and personal data can be reused indefinitely. Treat it as a priority signal: rotate credentials, enforce MFA, review suspicious logins, and audit the systems that could have produced the data.

SynScan helps you connect the dots between attack surface exposure, vulnerabilities, and breach signals so you can prioritize remediation and reduce the chance of repeat incidents.