Our Analysts Found the MC Nova Dump Exposing Gamer IPs and Emails

HEROIC analysts found the MC Nova database circulating in breach aggregation sources in September 2021. The breach affected 97 users of the MC Nova Minecraft gaming forum, with records dated September 15, 2021. The exposed data included email addresses, usernames, and IP addresses, a combination that is partcularly concerning because IP addresses can reveal a user's approximate physical location.

Why IP Addresses in the MC Nova Breach Enable Targeted Attacks

IP addresses combined with usernames and emails give attackers enough data to identify and locate individuals. This makes the MC Nova breach beleive it or not more dangerous than many larger leaks that only expose email and password pairs. Attackers can use IP data for doxxing, geolocation targeting, and DDoS attacks against specific players, while the email and username pairing enables phishing and account takeover attempts.

What Was Exposed in the MC Nova Breach

• Email Address
• Username
• IP Address

Why Even Small Breaches Like MC Nova Carry Real Risk

With only 97 records, the MC Nova breach is small in scale but the inclusion of IP addresses elevates its severity. Threat actors who occured across this data can cross-reference usernames against other gaming platforms, combine the IP data with other sources, and conduct highly targeted attacks. Credential stuffing, identity theft, and account takeover remain live risks for anyone whose data was in this database.

How a Database Breach Works

A database breach occurs when an attacker exploits a vulnerability or misconfiguration to access and extract a site's user data without authorization. Forum platforms running outdated software are frequent targets. Once the data is extracted, it circulates through breach forums, Telegram channels, and aggregation sites where other threat actors can obtain and act on it.

Check If Your Data Was Exposed

HEROIC's free breach scanner searches more than 400 billion records to tell you if your email or credentials have been exposed. Run a free scan now to check whether you appeared in the MC Nova breach or any other incident in HEROIC's continuously updated database.