CallOfDuty_Forums_com

We often see older breaches resurface, sometimes because they're newly discovered, but more often because the data is being re-packaged and sold to new audiences. What struck us about this particular breach wasn't the novelty, but the context: a relatively small 2015 breach from **CallOfDuty_Forums.com** being actively traded in circles known for credential stuffing and account takeovers. This suggests the data still holds value, either because users haven't changed passwords or because the email addresses are useful for phishing campaigns targeting fans of the Call of Duty franchise. The age of the breach highlights the long tail of risk associated with even seemingly minor data leaks.

The Call of Duty Forums Breach: A Lingering Threat

A 2015 breach affecting the **CallOfDuty_Forums.com** website has resurfaced in online breach trading communities. The breach, which initially occurred on **January 31, 2015**, exposed over **81,000** user records. While the breach itself is not new, its reappearance highlights the ongoing threat posed by older breaches, particularly when the exposed data remains valuable for credential stuffing and targeted phishing attacks. The data was discovered within a well-known Telegram channel frequented by actors known to engage in account takeover attempts.

Breach Stats:
* **Total records exposed:** 81,924
* **Types of data included:** Usernames, Email Addresses, IP Addresses
* **Source structure:** "Spamlog" database file.
* **Leak location(s):** Telegram channels known for trading breached credentials. The filename observed was **CallOfDuty_Forums_com_Spamlog_none_February_2015**.

While this breach is almost a decade old, its reappearance underscores the importance of proactive password management and monitoring for exposed credentials. The continued viability of this data highlights how threat actors can profit from older breaches if users reuse passwords across multiple platforms. The breach also serves as a reminder that even seemingly innocuous forum data can be valuable for targeted attacks.

The Have I Been Pwned? data breach notification service has tracked this breach since 2015.