Interstate Poker Club Breach: 21,752 Player Accounts Exposed

HEROIC's DarkHive intelligence system discovered the Interstate Poker Club data breach, exposing 21,752 records from a US-based poker event management platform. The breach occured in February 2018, leaking email addresses and MD5 password hashes from players, tournament organizers, and poker enthusiasts who registered on the platform to manage thier event participation.

Why This Is Dangerous

Online poker and gaming community members frequently use the same email address and password across multiple gambling platforms, betting sites, and financial services. Attackers who crack the MD5 hashes from this breach use the recovered credentials to access those linked accounts directly. They also target verified gaming email addresses with phishing campaigns designed to look like poker event invitations or prize notifications, tricking victims into revealing payment information or additional account credentials.

What Was Exposed

• Email Address
• Password Hash (MD5)

Why This Matters

Gaming and gambling community breaches carry heightened financial risk because users often have payment methods linked to thier accounts. Credential stuffing attacks using Interstate Poker Club data can give attackers access to online poker rooms, sports betting platforms, and casino accounts where victims hold real money balances. Account takeover in this context leads directly to financial theft, not just identity exposure. Beyond gambling platforms, attackers also test these credentials against banking apps, PayPal, and other fintech services used to deposit and withdraw gaming funds.

How Database Leaks Work

Database leaks at gaming and event management platforms often result from insecure web applications built on older frameworks with known vulnerabilities. Attackers identify exposed database ports, exploit SQL injection weaknesses in registration or login forms, or use brute-forced administrative credentials to access backend systems. The stolen user tables are then formatted into combolists and distributed on underground forums, where they are purchased by criminal groups running large-scale credential stuffing operations against seperate targets.

Check If You Are Affected

HEROIC offers a free identity scanner that searches over 400 billion records, including data from breaches like Interstate Poker Club. Visit heroic.com to scan your email address and find out if your information was exposed.