DLC Quickplay

We've been tracking an uptick in smaller, older breaches resurfacing in combolists and credential stuffing attacks. What really struck us wasn't the volume of records in this particular breach, but the age and specific demographic targeted. It suggests threat actors are revisiting older datasets, potentially finding valid credentials from users who haven't updated their passwords across platforms. The focus on a niche community also highlights that no online platform, regardless of size, is immune to these risks.

DLC Quickplay Breach: 16,669 Music Enthusiast Records Resurface

In March 2018, DLC Quickplay, a community platform and forum for music game enthusiasts based in the United States, experienced a data breach. The breach, now resurfacing in combolists, exposed approximately 16,669 unique records. This incident underscores the ongoing risk posed by older breaches, especially when combined with the practice of password reuse.

The breach was reported to have occurred on March 12, 2018, and the exposed data includes email addresses and MD5 hashed passwords. While MD5 is a weak hashing algorithm by today's standards, the fact that these credentials are now circulating again poses a risk to users who may still be using the same passwords on other, more critical platforms. The re-emergence of this data highlights the need for continuous monitoring of breach databases and proactive password resets for affected users.

Key point: Total records exposed: 16,669

Key point: Types of data included: Email addresses, MD5 hashed passwords

Key point: Source structure: Database, Combolist

Key point: Leak location(s): Combolists circulating on various online platforms

Key point: Date of initial leak: March 12, 2018

While direct coverage of the original DLC Quickplay breach is limited, the incident aligns with a broader trend of older breaches being repurposed in credential stuffing attacks. Security researcher Troy Hunt's Have I Been Pwned database includes this breach, further validating its existence and potential impact. The re-emergence of this data serves as a reminder that data breaches have a long tail, and the credentials exposed in these incidents can remain a threat for years to come.

Email · Address · Password · Hash