The codemaster Dump Contains Exactly 47,766 Email and Password Records

HEROIC analysts identified this breach affecting codemaster, a UK-based site, originally dated January 5, 2016. The dataset contains exactly 47,766 user records, including email addresses, usernames, IP addresses, birthdates, password salts, and password hashes, all of which remain in circulation among credential collections used for automated account attacks.

Why This Is Dangerous

This leak goes further than most: alongside login credentials, it includes birthdates, a detail that makes it far more useful for identity theft, not just account takeover. Combined with an email address and username, a birthdate can help an attacker pass identity verification checks on other services or craft a convincing phishing message.

What Was Exposed

• Email addresses
• Usernames
• IP addresses
• Birthdates
• Password salts
• Password hashes

Why This Matters

The combination of a birthdate with an email address and username is more valuable to attackers than a password alone, because it can be reused for identity theft even after a password is changed. If this data is paired with a cracked password, attackers can attempt credential stuffing across other accounts. Anyone affected by this breach should treat both their login credentials and personal details as compromised.

How This Database Breach Happened

This incident is classified as a database breach, meaning attackers accessed the site's backend directly rather than tricking individual users. This is typically achieved through an unpatched vulnerability, SQL injection, or a stolen administrator login. Once inside, the attacker exports the full user table, salts and hashes included, and that export later circulates on hacking forums, sometimes repackaged years later as if it were a fresh discovery.

Check If You Are Affected

Don't leave it to chance. HEROIC's free breach scanner checks your email address against a database of more than 400 billion leaked records, including this codemaster breach, and tells you instantly if your data was exposed. Run a free scan now to find out.