Breach Disclosure: BlackSpigotMC

BlackSpogotMC, a Minecraft hacking forum, has experience a data breach. 8.5 GB of data has been leaked, in the form of user names, email addresses, IP addresses, passwords, and more. The site recommends all users change their passwords.

Recommendations

If not already enabled, turn on the compromised credentials rule for all relevant entities and ensure relevant emails are entered for those entities, or reach out to [email protected] for assistance
If one of your entities receives an alert, ZeroFOX recommends immediate password changes for the affected account
Enable 2-factor authentication for all of your organizational accounts to help mitigate phishing and credential stuffing attacks
Remain alert to potential spear phishing attacks through email and social media.

Details

The Minecraft plugin cracking and leaking forum, BlackSpigotMC, suffered a data breach in July 2019. Exposed databases included 140,000 unique email addresses, IP addresses, user names, genders, geographic locations, and bcrypt hashed passwords. Allegedly, this was done by a rival hacking site. The site has posted the following notice for users:

Hey guys,

For the safety and security of your blackspigot account we thought it was best to make this announcement.
In the professional opinion of the staff team, we think it's **VERY IMPORTANT** that you change your blackspigot password as soon as possible. CLICK ME TO DO SO.

PS : We have added additional account security options including a login log. MAKE SURE TO USE EM!
PSS: If your account is compromised contact [email protected] ! 

Thanks,
~The BSMC Team