The Call of Gods Breach Happened in 2017. The Data Just Went Public Again.

HEROIC analysts flagged the Call of Gods forum database as it began circulating across dark web marketplaces and hacking communities. The breach took place in February 2017 and affected 636,849 registered forum members. The accessable data includes email addresses, usernames, IP addresses, password hashes, and the salts used to generate them. This gaming community breach has resurfaced years later, and the credentials are now being actively tested in automated attacks against unrelated accounts and services.

Why Gaming Forum Credentials Are Dangerous Beyond Gaming

Many people use the same email and password combination for gaming accounts that they use for email, banking, and streaming services. When a gaming forum like Call of Gods is breached, attackers immediately begin testing those credentials against higher-value targets. Your IP address being exposed also reveals your approximate location, which can be used for targeted social engineering or to bypass location-based account security checks. The salted vBulletin hashes in this breach are crackable, and seperate cracking tools designed for this format are freely available online.

What Was Exposed in the Call of Gods Breach

• Email Address
• Password Hash
• Username
• IP Address
• Salt

Why a 2017 Breach Is Still a Threat Today

The Call of Gods breach occured over eight years ago, but the data did not disappear. It was quietly held and traded among criminal networks before resurfacing recently on underground marketplaces. Attackers know that most people do not change their passwords unless forced to, so old breached credentials often still work. This data is now being fed into credential stuffing tools that can automatically test login combinations across thousands of websites, putting bank accounts, email accounts, and social media profiles at risk of takeover.

How a Database Breach Works

A database breach occurs when an attacker gains unauthorized access to the servers that store a website's user information. In the case of the Call of Gods forum, the entire user database was copied and taken. This SQL database dump contained the personal account details of over 636,000 players. Once removed, the data was packaged, shared, and eventually sold across multiple criminal platforms where it remains available today.

Check If Your Data Was Exposed

HEROIC's free breach scanner searches over 400 billion records from thousands of known breaches, including the Call of Gods forum database. Enter your email address right now to find out whether your credentials were part of this breach or any other, and take immediate steps to protect your accounts from takeover.