Minecraft Account Leak Means 234 Gamers Are Exposed

HEROIC found a stealer log titled 234 Minecraft Accounts By white0storme that was shared on Telegram in December 2022. The dataset contains 234 records specifically targeting Minecraft player accounts. Each record includes an email address, a plaintext password, and the URL of the login page, meaning these 234 gamers are now at direct risk of account theft.

Plaintext Gaming Passwords Are Easy Prey

The passwords in this file are entirely unprotected, stored in plaintext without any encryption or hashing. For gaming accounts, this is especially dangerous because attackers can immediately log in, change the password, and lock the original owner out. Minecraft accounts often hold purchased content, in-game items, and linked payment methods that make them valuable targets.

What Was Exposed

• Email addresses tied to Minecraft and potentially Microsoft accounts
• Plaintext passwords requiring no decryption effort to use
• URLs pointing to Minecraft and related login pages

Gaming Credentials Open the Door to Broader Theft

Many gamers use the same email and password for Minecraft, their Microsoft account, Steam, Discord, and other services. Attackers who obtain a working Minecraft credential will immediately attempt to use it elsewhere through credential stuffing. This can lead to stolen gaming libraries, compromised email accounts, and even financial loss if payment methods are linked.

How Gaming Credentials End Up in Stealer Logs

Infostealer malware is frequently spread through fake game mods, pirated software, and cheating tools that appeal to gamers. Once installed, the malware extracts every saved credential from the victim's browser, including gaming logins. These credentials are then compiled into targeted log files and distributed on Telegram, where they attract buyers and opportunistic hackers looking for easy account takeovers.

Check If Your Credentials Were Exposed

Minecraft players should verify whether their accounts have been compromised. HEROIC's breach scanner checks your email against more than 400 billion compromised records from breaches and stealer logs. If your credentials are found, change your Minecraft and Microsoft account passwords immediately and activate two-factor authentication to prevent unauthorized access.