Zybez RuneScape Forum Breach Exposes 92K User Accounts

HEROIC's DarkHive intelligence system discovered the Zybez data breach, exposing 92,239 records. The breach occured in September 2011 and affected users of Zybez, a US-based RuneScape gaming community forum. Leaked data included IP addresses, email addresses, usernames, and plaintext passwords.

Why This Is Dangerous

Plaintext passwords require no processing for attackers to use. Cybercriminals take these credentials and immediately run them through automated tools that test the same username and password combination against hundreds of other services. Gaming forum users often reuse thier passwords on streaming services, email accounts, and even banking platforms, meaning this breach from 2011 can still open doors to valuable accounts today.

What Was Exposed

• IP Address
• Email Address
• Username
• Passwords (plaintext)

Why This Matters

The combination of IP addresses and email addresses in this breach gives attackers geographic context alongside credentials, enabling more convincing phishing attacks tailored to a victim's region. Credential stuffing campaigns using Zybez data target other online games, streaming services, and financial accounts. Account takeover and identity theft risk remains elevated for anyone who registered on Zybez and has not changed those passwords on other platforms since 2011.

How Database Breaches Work

Gaming forum platforms stored user databases using standard web application frameworks that often had well-known SQL injection vulnerabilities in 2011. An attacker locates a vulnerable input field, injects a query to extract the user table, and walks away with every account's stored data. The resulting file gets posted on underground forums where it circulates for years, getting merged into larger credential collections that fuel ongoing automated attacks against current services.

Check If You Are Affected

HEROIC offers a free identity scanner that searches over 400 billion records, including data from breaches like Zybez. Visit heroic.com to scan your email address and find out if your information was exposed.