The GamerX Database Contains Exactly 66 Email and Password Pairs

HEROIC analysts catalogued a database breach affecting GamerX, an online gaming community platform, with data dated November 1, 2016. The breach contains 66 records exported from the site's user database. The leaked_data_types field is listed as none, however the dataset includes vBulletin-hashed passwords, which means user credentials were part of the export. The breach occured within a period of heightened targeting of gaming-related forum platforms, and the GamerX data has been observed in underground collections where gaming credentials are routinely traded and tested.

Why vBulletin Gaming Credentials Put Steam and Other Accounts at Risk

vBulletin-hashed passwords look secure at first glance, but the hashing format is well-understood and cracking tools have been accessable to attackers for many years. Gaming forum users are particularly attractive targets because the same email and password combination is frequently reused across Steam, Epic Games, and console platform accounts, all of which hold financial value through linked payment cards, game libraries, and in-game items. The 66 accounts in this breach represent 66 potential entry points into a much broader set of services.

What Was Exposed in the GamerX Breach

• vBulletin-hashed passwords (66 records)
• User account identifiers and profile metadata
• Email addresses linked to registered gaming accounts

Why Even Small Gaming Breaches Support Large-Scale Identity Theft

Attackers do not need millions of records to cause serious harm. The 66 records from GamerX feed directly into credential stuffing pipelines, where automated tools test each username and password pair across dozens of platforms in seconds. This is partcularly concerning because gaming account takeover often leads to financial fraud when payment methods are stored on the compromised platform. Identity theft follows when attackers use the same credentials to access email accounts and trigger password resets across other services. The breach of a small site becomes the starting point for a chain of access that is difficult to detect and stop.

How Database Breaches Work

A database breach occurs when an attacker gains unauthorized access to the server or software managing a website's user data. vBulletin-based forum platforms have long been targeted through publicly documented exploits that allow attackers to run commands against the database without needing a valid login. Once inside, the attacker exports user tables and distributes them through dark web markets and closed Telegram channels, where they remain in circulation indefinitely.

Check If Your Data Was Exposed

HEROIC's free breach scanner searches across more than 400 billion exposed records to check whether your email address appeared in the GamerX breach or any of the thousands of other incidents in our database. If you registered on GamerX or used the same password on other gaming platforms, enter your email now at HEROIC's breach scanner for an instant, comprehensive exposure report.