Over 500,000 User Details Allegedly Leaked from Renowned Gaming Site
An alleged data breach has been reported involving Multiplayer[.]it, an Italian gaming news and entertainment platform. A threat actor has allegedly leaked a dataset containing personal information of approximately 509,000 Multiplayer users on a notorious hacking forum. The dataset includes user IDs, usernames, email addresses, and hashed passwords.
Threat actor’s statement
Key Points
- An alleged data leak of Multiplayer[.]it affects half a million users.
- Leaked data includes user IDs, usernames, email addresses, and hashed passwords.
Assessment
The threat actor’s history of publishing data leaks on now-defunct hacking forums such as RaidForums and BreachForums lends a level of credibility to the current claims. The presence of email addresses from the leak in existing combolists increases the risk of account compromise for affected Multiplayer[.]it users.
SOCRadar Dark Web News
Initial validation through SOCRadar's Threat Hunting module suggests that some of the disclosed email addresses correspond to those previously identified in combolists, indicating a potential data breach.
SOCRadar Threat Hunting
Outlook
The potential exposure of Multiplayer[.]it user data necessitates prompt attention to mitigate risks such as account takeovers, phishing campaigns, and identity theft
Key Intelligence Gaps
- Verification of the authenticity of the entire dataset claimed to be leaked.
- Understanding the effectiveness of the hashing algorithm used for passwords.
- Assessment of the risk exposure for users whose information has been compromised.
Intelligence Requirements
- Analysis of the leaked dataset to confirm its origin and breadth.
- Continuous monitoring of the threat actor’s posts and activities on alternative platforms.
- Exploration of the threat actor’s modus operandi for patterns that could aid in cyber defense strategies.
