The eGamingSupply Database Holds 614 Exposed Email Records

HEROIC analysts recieved intelligence confirming that the eGamingSupply database breach, which occured on October 1, 2016, exposed 614 user records from the United States-based gaming supply platform. The leaked data included usernames and email addresses drawn from a vBulletin-based database. Though small in scale, this breach has resurfaced in dark web trading communities, making it an active risk for affected users today.

Why Exposed Usernames and Email Addresses Are Dangerous

Usernames and email addresses may seem harmless on their own, but attackers pair them with passwords from other breaches to run credential stuffing attacks. If you used the same email and username on other sites, those accounts are partcularly at risk. This data is accessable on dark web forums where it is sold in bulk to botnet operators targeting gaming and e-commerce accounts.

What Was Exposed in the eGamingSupply Breach

• Usernames
• Email addresses

How Older Breaches Like This One Fuel Modern Attacks

Even eight years after this breach occured, threat actors are still circulating the eGamingSupply data in credential stuffing lists. Attackers use automated tools to test these old email and username combinations across hundreds of websites simultaneously. The result is account takeover, identity theft, and in some cases financial fraud when banking or shopping accounts share the same login credentials.

How Database Breaches Work

A database breach happens when an attacker gains unauthorized access to the backend database of a website or application. In many cases this is done by exploiting a software vulnerability, using stolen credentials, or taking advantage of a misconfigured server. Once inside, the attacker can copy millions of records in minutes and disappear without triggering obvious alarms. The stolen data is then packaged and sold or shared on underground forums.

Check If Your Data Was Exposed

HEROIC's free breach scanner searches across more than 400 billion records to tell you instantly whether your email address appeared in the eGamingSupply breach or any other known data leak. Run a free check at HEROIC.com and take back control of your digital security.