In March 2012, Zybez.net, a prominent community fansite for RuneScape, experienced a data breach that compromised approximately 151,000 user accounts. The incident involved usernames, email addresses, and passwords hashed using algorithms consistent with MyBB 1.2+ and IPB2+ (Invision Power Board). Although the breach was identified and disclosed within 24 hours, the stolen data continued to circulate online and reemerged publicly in February 2018, with some passwords reportedly cracked over time. Zybez stated that it never stored passwords in plaintext and implemented additional security measures following the breach. The site eventually shut down in 2018 after 17 years of operation.
In March 2016, Nordic Games, a European game publisher, suffered a data breach that affected approximately 157,000 users. Shortly after the incident, the company rebranded as THQ Nordic. Among the compromised data were usernames, email addresses, IP addresses, and passwords stored as vBulletin hashes.
In 2019, CosmicPvP, a Minecraft Factions server launched in 2014 by YouTubers MrWoofless and PrestonPlayz, experienced a data breach. The incident reportedly affected approximately 158,000 users. Some of the leaked data includes usernames, email addresses, and gender information.
Verified Search lets you see exactly which data breaches exposed your
information and gives you access to the actual data,
shown in plain text. To get started, verify your email address.
In December 2020, the Sports website LeagueSpy suffered a data breach that impacted 159k members. The breach led to the exposure of data including Email addresses, IP Addresses, Usernames and Passwords stored as phpBB hashes. The website was breached by @donjuji- "adminer rogue mysql attack vector".
In 2016, TheCrims.com, a mafia-themed browser-based role-playing game, reportedly suffered a data breach. Approximately 160,921 user records were exposed. Some of the leaked data includes usernames, hashed vBulletin passwords with salts, email addresses, IP addresses, and site activity details.
In 2015, G Fuel, an energy drink brand, experienced a data breach reportedly caused by social engineering of Shopify support, which allowed unauthorized access to the Shopify admin panel. Approximately 161,412 user records were exposed. Some of the leaked data includes names, email addresses, phone numbers, geographic locations, and order details such as total spent and total orders.
In August 2020, Indian payment provider Paytm was reported to have suffered a data breach followed by a ransom demand, after which the data was circulated publicly. However, investigations later determined that the exposed dataset was unrelated to Paytm. The dataset reportedly included 3.4 million unique email addresses. Some of the leaked data includes names, phone numbers, genders, dates of birth, PAN IDs, income levels, and details of previous purchases.