WildStar Gaming Breach: 627,860 Passwords Exposed

The WildStar Breach: 627,860 Gaming Accounts' Passwords Exposed

HEROIC analysts have identified a data breach affecting WildStar, an online gaming platform, that exposed 627,860 user records. The breach dates back to July 2015 and the compromised data includes email addresses, usernames, and password hashes stored in IPB and MD5 formats.

Why Two Weak Hash Formats Are Worse Than One

This breach involves passwords secured with two older hashing methods, IPB and MD5, both of which are considered weak by modern standards. Attackers have widely available tools built specifically to crack MD5 and IPB hashes quickly, especially for passwords that are short, common, or based on dictionary words. Once cracked, these passwords work exactly like the original ones did.

What Was Exposed

• Email addresses
• Usernames
• Password hashes (IPB and MD5 formats)

Why This Matters

A breach of this size means hundreds of thousands of cracked passwords could end up feeding into credential stuffing campaigns, where attackers automatically test stolen logins against email providers, banking sites, and other gaming platforms. If a WildStar password was ever reused elsewhere, that account is at risk today, even though the original game and its breach are both years old.

How a Database Breach Like This Happens

This incident is classified as a database breach, meaning attackers gained direct access to WildStar's user database rather than intercepting individual accounts one at a time. This is often the result of unpatched software or exposed server access, allowing an attacker to extract the complete list of usernames, emails, and password hashes in one action.

Check If You Are Affected

If you ever had a WildStar account, or if you have a habit of reusing passwords across gaming platforms, it is worth checking your exposure. HEROIC's free breach scanner checks your email against more than 400 billion breached records, including this one, so you can find out and secure any accounts still using that password.