Sythe RuneScape Forum Breach Leaks 144K User Accounts

HEROIC's DarkHive intelligence system discovered the Sythe data breach, exposing 144,365 records. The breach occured in October 2011 and affected users of Sythe, a US-based RuneScape gaming community forum. Leaked data included IP addresses, email addresses, usernames, and hashed passwords using MD5 and IPB algorithms.

Why This Is Dangerous

MD5 and IPB password hashes are relatively weak by modern standards, making them susceptible to cracking with widely available tools and hardware. Once cracked, attackers use the exposed email and password pairs to attempt logins on other gaming platforms, email providers, and banking services. IP address data also reveals approximate geographic location information for each user, which attackers use to tailor phishing and social engineering campaigns.

What Was Exposed

• IP Address
• Hash Type
• Email Address
• Username
• Passwords (MD5 and IPB hashed)

Why This Matters

Gaming forum users frequently reuse thier credentials across multiple platforms, making this breach a useful resource for credential stuffing attacks against other gaming services, streaming platforms, and financial accounts. The combination of email, username, and IP address gives attackers rich profiling data to build convincing phishing messages. Account takeover and identity theft risk remains high for anyone who registered on Sythe in 2011 and has not since changed their passwords.

How Database Breaches Work

Forum platforms like Sythe typically store user data in a central relational database that attackers target through SQL injection attacks or compromised administrative accounts. Once the attacker gains database access, they extract the complete user table in minutes and compress it for distribution. This data then spreads across dark web forums and Telegram channels, where it gets combined with other breached datasets to form large combo lists used for automated credential attacks.

Check If You Are Affected

HEROIC offers a free identity scanner that searches over 400 billion records, including data from breaches like Sythe. Visit heroic.com to scan your email address and find out if your information was exposed.