Play-Gar.com Data Breach: 143,615 Records With IP Addresses Found

HEROIC analysts identified a file tied to Play-Gar.com, an online gaming community, dated 01-Apr-2016. The file contains 143,615 records made up of email addresses, usernames, password hashes, salts and IP addresses pulled directly from the community's own systems. The only way to know for certain whether your details are part of this file is to scan your email.

What an Attacker Can Do With a Gamer's Full Profile

A username tied to a gaming community often doubles as a handle used on other platforms, making it a useful thread for an attacker to pull on. Add an IP address and a potentially crackable password hash, and the picture becomes more complete: enough to attempt a login elsewhere, estimate a general location, and link this account to other activity from the same connection.

The Five Fields Pulled From This Gaming Community's Database

• Email Address: a confirmed contact point that can be targeted with phishing referencing this breach.
• Username: can be searched across other gaming and social platforms to find the same person's other accounts.
• Password Hash: not readable outright, but can potentially be cracked and reused if the password appears elsewhere.
• Salt: a value stored with the hash that an attacker factors in when attempting to crack it.
• IP Address: can help estimate a general location or tie this account to other online activity.

The Practical Risk of This Particular Mix

If a password from this file is cracked and reused, the result can be unauthorized access to other gaming or email accounts tied to the same person. The combination of username and IP address also gives an attacker extra material to build a convincing phishing attempt or to track down other profiles belonging to the same account holder across the internet.

How a Gaming Community's Database Ends Up in a File Like This

This record set reportedly came directly from Play-Gar.com's own forum database rather than from unrelated sources stitched together. In a breach like this, someone typically exploits a flaw in the forum software, a stolen administrator login or an exposed backup to copy the full member table, salts and IP logs included, in a single pass. That differs from data gathered gradually from several incidents, since everything here traces back to one community.

Checking Your Own Exposure From This Play-Gar.com File

The fastest way to find out if you are among these 143,615 records is to scan your email. If a match turns up, change that password right away, along with any other account still using it. This applies equally to a personal inbox and any work email used to register on a gaming site like this one.