The Age of Wushu Breach: 93,642 MD5 Password Hashes Exposed

HEROIC analysts identified a 2015 breach of Age of Wushu, the martial arts MMORPG, that exposed 93,642 accounts. The leaked data includes email addresses, usernames, IP addresses, and passwords hashed with MD5.

Why the Age of Wushu Breach Is Dangerous

MD5 is considered broken by current security standards and can be cracked quickly using widely available tools. With this breach dating back roughly a decade, it is likely that a large share of these password hashes have already been converted back into readable passwords by attackers.

What Was Exposed in the Age of Wushu Breach

• Email addresses
• Usernames
• IP addresses
• MD5 password hashes

Why This Matters

With over 93,000 accounts involved, this breach represents a sizable pool of credentials that can be tested against other services through credential stuffing. Gamers frequently reuse passwords between their gaming, email, and social accounts, so a cracked Age of Wushu password can open doors well beyond the game itself.

How This Database Breach Happened

This incident is classified as a database breach, meaning attackers extracted user records directly from Age of Wushu's systems. Large gaming breaches like this one tend to circulate widely on hacking forums and Telegram channels for years, repeatedly resurfacing as new attackers acquire and re-share the data.

Check If You Are Affected

If you ever played Age of Wushu, it is worth checking whether your account was part of this leak. HEROIC's free breach scanner searches more than 400 billion leaked records, including this breach, so you can find out immediately.