DKM Games

We've been tracking a resurgence of older breaches, resurfacing on various dark web forums and Telegram channels. What really struck us wasn't the volume of these leaks, but the fact that they are being repackaged and actively traded as "fresh" data. This highlights a persistent threat: even seemingly outdated breaches can still pose a risk if the exposed credentials remain valid or if the data can be used for targeted social engineering. One such incident involves data from **DKM Games**, a breach that initially occurred nearly a decade ago.

### The DKM Games Breach: Resurfaced Credentials from 2015

The breach at DKM Games, an online gaming platform, came to our attention after a user on a popular breach forum began advertising a "new" database containing user information. Upon closer inspection, the data was traced back to a breach that occurred on **July 1, 2015**. While the initial leak didn't garner significant attention at the time, its reappearance now underscores the enduring shelf life of compromised data and its continued value to malicious actors. The breach is concerning because even though no passwords were included, usernames can be used for credential stuffing attacks.

The re-emergence of this data highlights the importance of proactive monitoring and the continued relevance of older breaches. Threat actors are actively seeking and trading this information, hoping to capitalize on users who may have reused credentials or whose personal information can be exploited for other malicious purposes. While the lack of passwords might seem less critical, usernames can be combined with other data points to create more complete profiles for targeted attacks.

**Breach Stats:**

* **Total records exposed:** 37,852
* **Types of data included:** Usernames
* **Sensitive content types:** None
* **Source structure:** Database
* **Leak location(s):** Breach Forums

### External Context & Supporting Evidence

While the DKM Games breach itself didn't receive widespread media coverage in 2015, the current trend of resurfaced breaches is a topic of ongoing discussion within the cybersecurity community. Security researchers have noted a steady increase in the trading of older datasets on dark web marketplaces, with actors often attempting to monetize this data by presenting it as new or exclusive. This trend is further amplified by the ease with which these datasets can be shared and disseminated through platforms like Telegram and various online forums.

One Telegram post claimed that the files were "newly discovered forum user data". While this is not true, it highlights the trend of threat actors attempting to sell old data as new.