Rune Village Forum Breach Leaks 43K RuneScape Gamer Accounts

HEROIC's DarkHive intelligence system discovered the Rune Village data breach, exposing 43,268 records. The breach occured in October 2011 and affected users of Rune Village, a US-based RuneScape gaming forum. Leaked data included email addresses, usernames, IP addresses, dates of birth, and phpBB-hashed passwords.

Why This Is Dangerous

phpBB password hashes from 2011 are susceptible to modern cracking techniques, especially when users chose common or short passwords. Attackers who crack these hashes gain credentials to test against other gaming platforms, email accounts, and social media services. The inclusion of birth dates alongside email addresses makes this breach particularly valuable for identity verification bypass attacks on financial and government services that use date of birth as a security question.

What Was Exposed

• Email Address
• Username
• IP Address
• Birthday
• Password Hash

Why This Matters

Gaming community members who used the same credentials on Rune Village as on other platforms face real risk of account takeover even over a decade later. The combination of email, date of birth, and username provides attackers with enough personal information to attempt identity theft and account recovery attacks on platforms where birth date is used for verification. Users who reused thier Rune Village password on email or banking accounts are at particular risk of credential stuffing and financial fraud.

How Database Breaches Work

Small gaming forums like Rune Village typically ran on shared hosting with standard forum software such as phpBB, which had known vulnerabilities in 2011 that attackers actively exploited. An attacker gains access through a known software flaw or weak administrative credentials, exports the user database, and distributes the data on hacking forums. That data circulates for years, getting combined with other breached records to build comprehensive profiles of victims used in targeted attacks.

Check If You Are Affected

HEROIC offers a free identity scanner that searches over 400 billion records, including data from breaches like Rune Village. Visit heroic.com to scan your email address and find out if your information was exposed.