The PCGamingWiki Community Breach Means Old Passwords Still Work

HEROIC analysts identified a database breach tied to the PCGamingWiki Community forum (community.pcgamingwiki.com), which exposed 2,179 accounts. The breach dates back to April 1, 2016, and the data has continued to circulate on forums that trade in older database dumps. The exposed records include forum usernames and password data secured with the IPB hashing format used by the site's forum software.

The PCGamingWiki Community Breach Means Old Passwords Still Work

Even years after a breach like this, the password hash it contains can still be cracked with modern tools, especially for passwords that are short or reused elsewhere. Once cracked, an attacker has a working username and password combination. If you set up your PCGamingWiki account with a password you still use today on another site, that old account is the reason a stranger could log in somewhere else entirely.

What Was Exposed in the PCGamingWiki Community Breach

• Forum usernames
• Password data secured with IPB hashing

Why This Matters for the 2,179 Accounts Involved

A gaming wiki forum feels like a low-stakes place to have an account, which is exactly why people are more likely to reuse a familiar password there. Once that password is cracked, it becomes ammunition for credential stuffing attacks, where automated tools try the same login pair across email providers, shopping sites, and banks. That can quickly turn into account takeover, identity theft, or financial fraud far removed from a gaming forum.

How a Forum Database Breach Like This Happens

IPB-powered forums, like many community platforms from this era, have a documented history of vulnerabilities in the underlying software. An attacker who exploits an unpatched flaw or gains administrator access can pull the entire member table in a single step, capturing every account's username and password hash at once. That is how a modest gaming community forum ends up as tradable data on breach forums years after the fact.

Check If You Are Affected

If you ever registered on the PCGamingWiki Community forum, or reused that password anywhere else, it is worth checking your exposure. HEROIC's free breach scanner checks your email against more than 400 billion leaked records, including this breach, so you can find out in seconds whether it is time to change a password.