Gaming Users Targeted: 99,072 Passwords Exposed in Dump

HEROIC discovered a large-scale stealer log dump specifically targeting gaming accounts, labeled "Gaming Part 5," that was distributed through Telegram in February 2023. The file exposes 99,072 records, each containing a gamer's email address, their plaintext password, and the URL of the gaming service where the credential was captured. The "Part 5" designation suggests this is one installment in an ongoing series of gaming credential harvests.

Plaintext Passwords Leave Gamers Defenseless

Every password in this dump appears in plaintext, with no hashing or encryption to slow down attackers. This means anyone who accesses the file can immediately log into the associated gaming accounts. For gamers, this puts virtual inventories, in-game purchases, linked payment methods, and personal profile information at immediate risk of theft or manipulation.

What Was Exposed

• Email Addresses — associated with gaming platform accounts
• Plaintext Passwords — stored without any cryptographic protection
• URLs — identifying the specific gaming platforms and services targeted

Credential Stuffing Hits Gamers Hard

Gaming communities are prime targets for credential stuffing because many players use the same login across Steam, Epic Games, PlayStation Network, Xbox Live, and other platforms. An attacker armed with nearly 100,000 gaming credentials can test them against every major gaming service within hours using automated tools. Compromised gaming accounts are routinely sold on underground markets, often for the value of their digital assets and linked payment methods.

The Infostealer Pipeline Targeting Gamers

Infostealer malware frequently targets gamers through fake game mods, pirated software, cheat tools, and phishing messages in gaming communities. Once the malware is installed, it harvests saved passwords from browsers, captures session cookies that can bypass two-factor authentication, and records credentials as they are entered. The resulting logs are compiled into themed collections like this gaming series and sold or shared on Telegram channels.

Check If Your Credentials Were Exposed

With nearly 100,000 gaming accounts compromised in this single dump, the chances of exposure are significant for active gamers. HEROIC's breach scanner covers more than 400 billion compromised records and can determine whether your email or password appears in this leak or in any other known data breach. Scan your credentials now and immediately update any passwords that may be compromised across all your gaming platforms.