Plaintext and Unprotected: 690,190 Logins in a New data-gaming File

You reuse a password on a gaming site, and months later it shows up in a file with nearly 700,000 other logins. That is the situation for anyone in this leak. A Telegram file called new data-gaming, associated with an uploader using the label MrEitch, surfaced in January 2021 holding 690,190 email and password pairs in plaintext, each tied to a URL.

Why a Reader Should Take a List This Size Seriously

At nearly 700,000 records, this file is large enough to feed automated credential stuffing campaigns for weeks. Every password sits in readable plaintext, meaning there is no cracking delay standing between this file and an attacker testing it against your other accounts right now.

What Landed in This File

• Email addresses: the usernames tied to each password record.
• Plaintext passwords: stored as readable text, usable immediately without cracking.
• URLs: the login destinations each credential pair was captured from or aimed at.

What This Means for Anyone in the File

If your password here was reused elsewhere, that other account, whether email, banking, or another gaming platform, is a target for credential stuffing. With a file this large, the odds of being caught in an automated attack run are meaningfully higher than with a smaller list.

How a File This Large Gets Compiled

This is a combolist, built by merging credential pairs from multiple existing sources into one large file, likely by the uploader labeled MrEitch, rather than extracted from a single company's systems in one intrusion.

Is Your Login in the New data-gaming File?

Scan your email to check right now. If you get a match, change that password everywhere you have reused it, starting with your most sensitive accounts, and give every account its own unique password going forward. This applies equally to work and personal email addresses.