Grand Exchange Tracker Gave Hackers Enough to Take Over Your Accounts

HEROIC analysts discovered the Grand Exchange Tracker breach while monitoring data being traded on underground forums. The breach occured in May 2017 and exposed 42,196 user accounts from the popular Oldschool RuneScape flipping tool. The compromised records include email addresses, usernames, phone numbers, and password hashes, giving attackers multiple ways to target affected users both inside and outside the game.

What Hackers Can Do with Your Phone Number, Email, and Password Hash

Having a phone number alongside an email address and password hash is a powerful combination for attackers. They can attempt SIM swapping, where they convince your phone carrier to transfer your number to a device they control, bypassing two-factor authentication. They can also use the phone number for targeted phishing calls or text scams. The password hash can be run through cracking tools, and once cracked, that password gets tested against banking sites, email providers, and social media platforms automatically. This combination makes seperate accounts suddenly vulnerable all at once.

What Was Exposed in the Grand Exchange Tracker Breach

• Email Address
• Phone Number
• Password Hash
• Username

Why Gaming Platform Breaches Lead to Real-World Account Takeovers

Many people use the same email and password across their gaming accounts and their everyday online accounts. When a gaming platform gets breached, attackers do not stop at the game. They immediately test the recieved credentials against email providers, banks, and retail sites using automated tools that can run thousands of attempts per minute. A stolen gaming password can unlock a much more valuable account within hours. The inclusion of phone numbers in this breach raises the risk even further, enabling social engineering attacks that go well beyond simple credential stuffing.

How Database Breaches Work

A database breach happens when attackers gain unauthorized access to the stored records of a website or application. They may exploit software vulnerabilities, use stolen admin credentials, or find a misconfigured server. Once inside, they copy the database tables containing user account information. That data is then sold or shared on dark web marketplaces, where other criminals use it to run automated attacks against other platforms, build phishing campaigns, or steal identities.

Check If Your Data Was Exposed

HEROIC's free breach scanner checks your email against more than 400 billion records from known data breaches, including the Grand Exchange Tracker breach. If your information appears in any known dataset, you will receive an instant report with recommended next steps. Visit HEROIC.com to run your free scan and protect your accounts.