Timeline: How the 1.9KK Gaming Base UHQ Leak Unfolded Online

The data behind a dataset called "1.9KK Gaming Base UHQ" traces back to April 2, 2023, before surfacing on a Telegram channel where HEROIC analysts logged it into the threat intelligence system. In the time between the original theft and its public upload, the file, containing 1,907,776 records of email addresses, plaintext passwords, and login URLs tied to gaming accounts, could have already changed hands multiple times among buyers on underground markets.

Why the Gaming Base UHQ Leak Is Dangerous

Every day a stolen credential sits unnoticed is a day an attacker has to use it. With close to 1.9 million gaming account credentials stored in plain text, and each one tagged with its exact login URL, the accounts in this file were exposed to being logged into, drained of in-game assets, or resold long before most victims had any idea their data was compromised.

What Was Exposed

• Email addresses
• Plaintext passwords
• Login URLs for the gaming platforms affected

Why This Matters

Gaming accounts often hold saved payment methods and valuable in-game items, but the bigger risk is password reuse. If any of the 1,907,776 people in this leak used the same password for their email or a financial account, the risk extends far beyond gaming, into credential stuffing, account takeover, and potential financial fraud.

How Stealer Logs Work

This dataset is a stealer log, data lifted from individual victims' devices by malware rather than stolen from a gaming company's servers directly. Once installed, typically through cracked games or cheat tools marketed to gamers, the malware copies saved logins from the browser and exports them for the attacker. Logs are then sorted by theme, gaming accounts bundled separately from streaming or email accounts, and released or sold once enough infections have accumulated to make a sizeable "base."

Check If You Are Affected

The sooner you check, the shorter the window an attacker has to use your data. HEROIC's free breach scanner searches more than 400 billion breached records, this gaming base leak included, so you can confirm your exposure right now and secure your accounts before someone else does.