One Database, Two Password Formats: 28,231 Oasis.ps Accounts Exposed

HEROIC analysts identified 28,231 exposed records tied to an Oasis.ps data breach dated August 1, 2015. Oasis.ps is a fan community site related to the Club Penguin gaming community. The exposed dataset is confirmed to include passwords, stored using a mix of MD5 hashing and plaintext, meaning some passwords were never encrypted at all.

One Database, Two Password Formats: 28,231 Oasis.ps Accounts Exposed

What makes this breach notable is the mix of password protection found within it. Some accounts had their passwords hashed with MD5, an older algorithm that can be cracked with modern tools, while other accounts had passwords stored in plaintext with no protection at all. That inconsistency suggests the platform's security practices changed or were incomplete over time, leaving a meaningful portion of the 28,231 affected accounts with passwords that are immediately usable by anyone who has this data.

What Was Exposed

• Passwords, stored as a mix of MD5 hashes and plaintext

Specific additional data types beyond passwords are not confirmed for this dataset, so we are not speculating on what else may have been included.

Why This Matters

Whether a password was stored in plaintext or as an easily crackable MD5 hash, the practical outcome for affected users is similar: their password from this platform should be treated as compromised. Attackers who obtain data like this test it across other accounts using automated credential stuffing tools, since many people reuse the same password across multiple sites. Given that Oasis.ps is a community tied to younger gaming fans, users and parents alike should treat any password used on this platform as exposed and change it anywhere else it may have been reused.

How a Database Breach Exposes Passwords in Multiple Formats

This incident is classified as a database breach, meaning the data was extracted directly from Oasis.ps's stored account records rather than gathered through malware on individual devices. Smaller community and fan sites like this one often run on older software and receive less consistent security maintenance than larger commercial platforms, which can result in exactly the kind of inconsistent password protection seen in this breach. Attackers typically gain access to breaches like this by exploiting a known vulnerability, using stolen administrator credentials, or finding a server that was left insufficiently secured.

Check If You Are Affected

If you or your child ever had an account on Oasis.ps, it is worth checking whether that account appears in this breach. HEROIC's free breach scanner searches more than 400 billion leaked records to show you exactly where your information has surfaced. Run a free scan today and update any passwords you may have reused across other accounts.