The BlankMediaGames Breach Gave Hackers 7 Million Crackable Passwords

HEROIC analysts identified the BlankMediaGames breach while tracking credential sets circulating on hacking forums and Telegram channels in late 2018. The breach occured on December 28, 2018 and targeted the company behind the popular online game Town of Salem, exposing 7,206,282 user records. The data included email addresses, usernames, IP addresses, and phpass password hashes, a combination that recieved immediate attention from credential cracking communities due to known weaknesses in the phpass hashing format.

The BlankMediaGames Breach Gave Hackers Everything They Need to Hijack Accounts

With email addresses, usernames, IP addresses, and crackable password hashes all in one dataset, attackers have a complete profile for account takeover. The phpass hashes used by BlankMediaGames are accessable to cracking with modern GPU rigs, meaning that many of the 7.2 million passwords in this breach have likely already been reversed. Those cracked credentials can then be tested against email providers, gaming platforms, and financial services where users beleive their old passwords are still safe.

What Was Exposed in the BlankMediaGames Breach

• Email Address
• Username
• IP Address
• Password Hash

Why Gaming Platforms Are Prime Targets for Credential Theft

Gaming platforms collect real email addresses and passwords from users who often apply those same credentials to more sensitive accounts. When a breach like BlankMediaGames hits, attackers do not just target the game. They run the exposed combinations against social media, banking portals, and corporate email systems. This credential stuffing pipeline has powered account takeovers, identity theft, and financial fraud affecting millions of people whose gaming activity seemed entirely seperate from their professional lives.

How Database Breaches Work

A database breach occurs when an attacker successfully compromises a website's backend data storage, extracting user records without authorization. Attackers typically exploit vulnerabilities in web applications, poorly secured admin panels, or third-party components to gain database access. Once inside, they copy the contents of user tables, including stored credentials, and sell or publish the data on underground markets where other criminals use it for downstream attacks.

Check If Your Data Was Exposed

HEROIC's free breach scanner searches over 400 billion compromised records, including the full BlankMediaGames dataset. Check your email address right now to find out if your credentials are in the hands of attackers and what steps you should take to protect your accounts.