Search Your Email: The Go Games 2020 Breach Exposed 6.2 Million Accounts

HEROIC analysts uncovered that the Go Games 2020 breach occured in approximately January 2020, exposing 6,253,109 records from the US-based gaming site. The leaked data included email addresses, usernames, password hashes, and salts, making this a partcularly significant incident for gamers who reuse credentials across platforms.

Salted MD5 Hashes Are Crackable: What That Means for Your Password

While salted MD5 hashing is better than storing plaintext passwords, MD5 is considered cryptographically weak and can be cracked using modern GPU-accelerated tools relatively quickly. An attacker who recieved this database can run offline cracking sessions against the hashes, recovering actual passwords without ever touching the original site, then test those recovered credentials against email, banking, and other gaming accounts.

What Was Exposed in the Go Games 2020 Breach

• Email Address
• Password Hash
• Username
• Salt

A Repeat Breach History Makes Go Games a Cautionary Tale for Gaming Platforms

Go Games had already suffered a seperate breach in 2015 affecting roughly 3 million users. Being breached twice in five years signals a systemic failure to address underlying security vulnerabilities. For users, the real-world risk is accessable historical credentials stacking up in attacker databases, dramatically increasing the chances that at least one account tied to your email has been compromised and that your password patterns are now known.

How Database Breaches Work

A database breach occurs when an unauthorized party gains access to a platform's stored user data, commonly through SQL injection attacks, compromised admin credentials, or misconfigured server permissions. For gaming sites, databases typically contain registration data including usernames, emails, and hashed passwords. Attackers extract this data in bulk and distribute it through hacking forums and Telegram channels, where it fuels credential stuffing attacks against other platforms.

Check If Your Data Was Exposed

HEROIC's free breach scanner searches more than 400 billion leaked records, including data from the Go Games 2020 breach, and tells you instantly whether your email address appeared in this or any other known incident. Run your free check at HEROIC and see exactly what data attackers may already have on you.