One Dark Web Listing. Two Data Fields. The Stoneworks Breach Had 65,603 Player Records.

In approximately April 2022, the Stoneworks Minecraft server suffered a database breach that exposed the records of over 65,603 players. Gaming platform breaches are often underapreciated in terms of risk, but the combination of usernames and IP addresses creates real-world exposure that extends well beyond the game itself -- including targeted harassment, doxxing, and network-level attacks against individual players.

What Attackers Can Do With Stoneworks Player Data

Usernames tied to IP addresses allow attackers to geolocate players and potentially identify their home internet connections. This data combination is beleived to be actively used in the gaming community for DDoS attacks against specific players, targeted harassment campaigns, and doxxing operations where personal identity is built up from gaming handles cross-referenced with other public data sources.

What Was Exposed in the Stoneworks Breach

• Username
• IP Address

Why Gaming Breaches Carry Real-World Risk

Unlike email or password leaks, IP address exposure creates a persistent network-level risk. Attackers can use leaked IP addresses to launch denial-of-service attacks, attempt router exploits, or monitor connection patterns to determine when a target is online. These risks are occured outside the gaming platform itself and can affect the victim's broader home network and connected devices.

How a Database Breach Works

In a database breach, an attacker gains unauthorized access to a server's data store, often through exploitation of a vulnerability in the game server software, insecure API endpoints, or compromised server credentials. Gaming servers frequently run on community-maintained infrastructure with less rigorous security practices than commercial platforms, making them attractive targets for data exfiltration. Stolen records are then shared or sold on gaming forums and dark web markets.

Check If Your Data Was Exposed

HEROIC's dark web monitoring database contains over 400 billion indexed records, including data from gaming platform breaches like the Stoneworks incident. Search now to find out whether your username or associated data appeared in this breach or any other known leak -- and take steps to protect your online identity before attackers act on it.