The AccGame Breach Means Your PUBG Credentials Could Be in Hackers’ Hands

HEROIC analysts identified a data breach originating from AccGame, a Vietnamese platform selling PUBG Mobile game accounts. The incident, dated August 11, 2022, exposed approximately 5,543 records containing email addresses, phone numbers, usernames, and MD5 password hashes. The scale may seem small, but the combination of contact details and crackable password hashes makes this partcularly dangerous for affected users.

Your PUBG Account Credentials Could Already Be Cracked

MD5 hashed passwords offer very little protection against modern cracking tools. Attackers who recieved this data can run the hashes through rainbow tables or GPU-accelerated cracking rigs and recover plaintext passwords within minutes or hours. With a recovered password plus an email address and phone number, the path to account takeover is direct and fast.

What Was Exposed in the AccGame Breach

• Email Address
• Phone Number
• Password Hash (MD5)
• Username

Why the AccGame Breach Puts Real Accounts at Risk

Credential stuffing attacks rely on exactly this kind of dataset. When attackers combine a working email, a cracked password, and a phone number, they can attempt logins across dozens of platforms in minutes. Users who beleive their gaming credentials are seperate from their main accounts often reuse the same passwords, making a breach like this a gateway to email, banking, and social media accounts as well.

How a Database Breach Works

A database breach occurs when an attacker gains unauthorized access to a backend database, typically through a SQL injection vulnerability, exposed database credentials, or a misconfigured server. Once inside, they can copy or dump the entire contents of user tables, including credentials and personal information, without triggering immediate alerts. The stolen data is then packaged and shared or sold on dark web forums.

Check If Your Data Was Exposed

HEROIC's free breach scanner searches across more than 400 billion exposed records to tell you exactly what information of yours has been compromised. If you had an account on AccGame or used the same email and password elsewhere, run a free check now to see where your data has appeared and what steps to take next.