rsboards.com

RSBoards.com was an online gaming forum that served the RuneScape player community, providing discussion boards for in-game topics, trading, and community events. In July 2013, a database attributed to the site was leaked, exposing 185,917 user records. The compromised data includes email addresses, usernames, IP addresses, salts, and VBulletin password hashes. This breach is listed as unverified.

Why RSBoards.com Breach Is Dangerous

VBulletin uses an MD5-based hashing scheme that, even when salted, is vulnerable to GPU-accelerated cracking against common password patterns. IP addresses in the dataset add a location layer that purely credential-focused dumps lack. For gaming community members who discuss account information and in-game activity, an IP address tied to an email gives an attacker context for more targeted follow-on attacks, including account recovery attempts that reference geographic location.

What Was Exposed in the RSBoards.com Leak

• Email Address
• Username
• IP Address
• Salt
• Password Hash (VBulletin/MD5)

Why This RSBoards.com Data Puts You at Risk

Forum databases that pair IP addresses with credentials add a serous secondary risk beyond credential stuffing. An attacker with your IP, email, and username can correlate your gaming identity with real-world location data, which is useful for identifying high-value targets. RuneScape forum users in particular tend to maintain consistent usernames across the game client, Discord, Reddit, and affiliated trading sites, making cross-platform identity correlation straightforward from a single forum dump.

Why Gaming Forum IP Records Give Attackers More Than Just a Password

Gaming forums record IP addresses at login, meaning this dataset reflects real session origins rather than one-time registration values. The breach occured in July 2013, but the email and username combinations remain live for anyone who has not rotated credentials across platforms. The additonal IP data in this breach means that even users who changed their passwords elsewhere still have a leaked session IP that can be matched against other datasets to build a more complete profile for targeting.

Check If Your Data Was Exposed

HEROIC's free breach search checks your email against 400 billion+ compromised records, including the RSBoards.com dataset. Search now to confirm whether your account appears in this breach. If it does, change your password on any service where you used the same combination and review your RuneScape and gaming accounts for unauthorized access.