The Minecraft World Map Breach Exposed 70,998 Gamer Accounts

HEROIC analysts identified a database leak tied to Minecraft World Map (minecraftworldmap.com), a site for sharing Minecraft game maps. The breach is dated January 15, 2016, and exposed 70,998 records, including email addresses, usernames, IP addresses, passwords hashed with salted MD5, and the salt values themselves.

Why the Minecraft World Map Breach Matters for Gamers

Community gaming sites like this one attract a young, active user base that often reuses the same login across multiple game-related accounts. With IP addresses included alongside emails and passwords, this dataset gives attackers more than just a login attempt. It can help tie an account to a general location, which adds an extra layer of risk beyond a typical password leak.

What Was Exposed in the Minecraft World Map Database

• Email addresses
• Usernames
• Password hashes (salted MD5)
• Salt values
• IP addresses

Why This Matters for the 70,998 Accounts Involved

Salted MD5 offers more protection than plain MD5, but it's still considered weak against modern cracking tools. If a password from this breach gets cracked and was reused on another account, whether a school login, an email provider, or another game platform, attackers can use credential stuffing to try that same combination elsewhere, potentially leading to account takeover well beyond this one site.

How a Salted MD5 Database Breach Like This Happens

This incident is classified as a database breach, meaning the records were extracted directly from stored data rather than collected one login at a time through malware. Community sites like this are frequently compromised through a vulnerability or misconfiguration that lets an attacker copy the entire user table, hashes and salts included, in a single action. Weaker hashes from that table can then be cracked using known password lists and modern computing power.

Check If You Are Affected

If you or your family have used a Minecraft community site and reused a password, it's worth checking your exposure. HEROIC's free breach scanner checks your email against more than 400 billion leaked records, so you can see where your data has surfaced and update any passwords still in use.