Gamers Beware: The GoodGamer Breach Just Dumped 380K Accounts

HEROIC analysts identified a database breach affecting GoodGamer, a Canadian gaming platform, with a leak date of April 2021. The breach exposed 380,257 user records, including email addresses, phone numbers, and usernames. This data has been accessable to threat actors on breach forums, putting a large segment of the gaming community at risk of targeted phishing and account hijacking.

How Attackers Use Gamer Profiles to Take Over Accounts

With email addresses, phone numbers, and usernames combined, attackers have everything needed to launch convincing phishing campaigns, SIM-swap attacks, and account takeover attempts. Gamers are partcularly attractive targets because valuable in-game assets and linked payment methods make their accounts highly monetizable on dark web marketplaces.

What Was Exposed in the GoodGamer Breach

• Email Address
• Phone Number
• Username

Why 380K Exposed Gamer Accounts Is a Serious Threat

The combination of username and email address allows attackers to cross-reference this data against other breaches to build complete profiles on victims. Once phone numbers are included, the risk of SIM-swapping and identity theft escalates significantly. This breach, which occured in April 2021, may still be actively used in credential stuffing campaigns targeting gaming and related platforms today.

How Database Breaches Work

A database breach occurs when an unauthorized party gains access to a platform's stored user records, often by exploiting vulnerabilities in web applications, misconfigured cloud storage, or compromised administrative accounts. Attackers can then extract and sell or trade the data on dark web forums, where it is used for follow-on attacks including phishing, account takeover, and identity fraud.

Check If Your Data Was Exposed

HEROIC's free breach scanner checks your email against more than 400 billion records, including the GoodGamer breach. Find out if your data was exposed and take steps to protect your accounts before attackers do.