4Metin Breach Leaves 35,228 Passwords Open to Takeover

4Metin Breach Leaves 35,228 Passwords Exposed

HEROIC analysts found data from 4Metin, a discontinued Romanian gaming forum, posted on a hacking forum following a database breach dated April 29, 2022. The exposed data includes 35,228 records containing email addresses and plaintext passwords.

Why This Is Dangerous

Because these passwords were never hashed, they sit in the leaked file exactly as users typed them. Anyone who reused a 4Metin password on another account has effectively handed that account's key to whoever downloads this file.

What Was Exposed

• 35,228 total records
• Email addresses
• Plaintext passwords

Why This Matters

The consequence of this leak does not stop with the defunct forum itself. Attackers routinely feed leaked email-password pairs into credential stuffing tools that test them against other active sites, leaving anyone among these 35,228 users open to account takeover, financial fraud, and identity theft on services they still use today.

How Database Breaches Happen

A database breach occurs when an attacker gains unauthorized access to a company's backend systems and copies out user records directly. When a platform stores passwords as plaintext instead of using secure hashing, as happened here, every password becomes instantly usable the moment the database is stolen.

Check If You Are Affected

HEROIC's free breach scanner checks a database of more than 400 billion breached records in seconds to show whether your email address appears in the 4Metin leak or any other known breach. Run a free check now and change any password you may have reused since 2022.