HockeyStreams

We've seen a steady increase in breaches targeting niche online communities, often overlooked in broader threat landscapes. This week, our team discovered a significant data leak originating from HockeyStreams, a now-defunct streaming service that provided access to live and on-demand hockey games. What really struck us wasn't just the volume of data, but the specific nature of the user information exposed, painting a clear picture of user activity and preferences within the platform. The data had been circulating quietly for some time, but we noticed a recent spike in chatter on several hacking forums, suggesting renewed interest and potential exploitation.

The HockeyStreams Breach: A Play-by-Play of User Data Exposure

The breach, stemming from the now-defunct streaming service HockeyStreams, exposed a treasure trove of user data, offering insights into the viewing habits of hockey fans. The data was discovered on a popular hacking forum on October 26, 2024. What caught our attention was the comprehensive profile information included, going beyond basic credentials. This level of detail can be leveraged for targeted phishing campaigns and account takeover attempts on other platforms. This incident is a stark reminder of the long-lasting impact of data breaches, even from services that are no longer operational.

• Total records exposed: Approximately 290,000
• Types of data included: Usernames, email addresses, hashed passwords (primarily MD5), IP addresses, subscription details, viewing history, and forum activity.
• Sensitive content types: Viewing history reveals specific games watched, potentially exposing user preferences and habits.
• Source structure: SQL database dump
• Leak location(s): Initially surfaced on a well-known hacking forum, subsequently spread to various Telegram channels and file-sharing sites.

External Context & Supporting Evidence

While mainstream media hasn't widely covered this specific breach, similar incidents involving compromised user data from streaming services have been reported. For example, in 2020, ZDNet reported on a breach at Gamerbase, exposing user data from various gaming platforms. The HockeyStreams breach shares similar characteristics, highlighting the vulnerability of online entertainment services to data exfiltration. One Telegram post claimed the files were “a complete dump of the user database, ready to crack those old MD5 hashes”. The use of MD5 hashing, a deprecated algorithm, further underscores the security shortcomings of the platform.