GameForum Hack: Plaintext Passwords of 73K UK Gaming Forum Members Leaked

HEROIC's DarkHive system discovered the GameForum breach, exposing 73,573 records in August 2018. This now-defunct UK-based online gaming forum suffered a database compromise that revealed member email addresses and plaintext passwords belonging to tens of thousands of gaming enthusiasts who participated in this online community.

Why This Is Dangerous

The storage of passwords in plaintext is a fundamental security failure that eliminates any protection for user credentials the moment a database is accessed by an attacker. Gaming forum users frequently reuse passwords across multiple gaming platforms, subscription services, and digital storefronts where they may have linked payment methods. Plaintext passwords from gaming communities are particularly sought after for gaming account takeover attacks targeting platforms like Steam, PlayStation Network, and Xbox Live.

What Was Exposed

• Email Address
• Plaintext Password

Why This Matters

Gaming accounts hold real monetary value through stored payment cards, digital game libraries, and in-game items and currencies that can be sold or transferred. Users who registered on GameForum with the same credentials used on gaming storefronts face direct financial risk from account theft. Even years after this breach, the credentials remain actionable because many users have not changed passwords they set in 2018, making them viable inputs for ongoing credential stuffing campaigns.

How Database Breach Works

Online gaming forums running on legacy content management platforms are vulnerable to SQL injection attacks, which allow attackers to extract entire user databases through web-facing input fields. The failure to hash passwords in this case suggests the platform was built without security-conscious development practices. Extracted plaintext credentials are immediately actionable and are traded in underground markets where buyers test them against gaming platforms and other consumer services.

Check If You Are Affected

HEROIC offers a free identity scanner searching over 400 billion records including data from the GameForum breach. Visit heroic.com to check if your information was exposed.