498 Password Hashes From the MCHub Breach Exposed on the Dark Web

HEROIC analysts uncovered the MCHub breach, a database dump from a Canadian Minecraft server hosting provider that surfaced in January 2021. The breach exposed 498 records, recieved from what appears to be a direct export of the platform's user database, containing email addresses, MD5 password hashes, and IP addresses belonging to registered customers of the hosting service.

Why MD5 Password Hashes and Email Addresses Are a Dangerous Combination

MD5 is a broken hashing algorithm that can be cracked in seconds using freely available tools. When paired with email addresses and IP addresses, attackers gain both the credentials and the contact point needed to launch account takeover attempts across other services. Any MCHub user who reused their password elsewhere is partcularly exposed to credential stuffing attacks targeting email, gaming, and hosting accounts.

What Was Exposed in the MCHub Breach

• Email Address
• Password Hash
• IP Address

Why MCHub Users Face Real Account Takeover and Identity Theft Risk

Hosting service users often manage multiple servers or services under a single account, meaning a compromised MCHub credential could cascade into broader unauthorized access. The IP addresses leaked in this breach occured alongside email and password data, giving attackers a complete profile for phishing, credential stuffing, and potentially targeting the Minecraft servers those users operate.

How Database Breaches Work

A database breach occurs when an attacker gains unauthorized access to a platform's backend data store, most commonly through SQL injection, insecure configurations, or compromised admin credentials. The attacker exports the user table, which is then packaged and distributed on hacking forums and dark web markets, where it circulates and is used in automated credential attacks for years after the original compromise.

Check If Your Data Was Exposed

HEROIC's free breach scanner is powered by over 400 billion records from known data leaks worldwide. Enter your email address to check whether your MCHub credentials or data from any other breach are currently in the hands of threat actors, with no account required and at no cost.