Breach Disclosure: Armor Games

Armor Games, a gaming website that hosts Flash-based browser games, suffered a data breach on January 1, 2019. According to TechRaptor, the breach was disclosed to Armor Games in late January of the same month of the breach. This breach was one of many by gnosticplayers, who sold the data on the now shutdown Dream Market. The breach contained approximately 11 million rows of usernames, email addresses, SHA-1 passwords plus salt, date of births, genders, locations and site profile details.

Recommendations

If not already enabled, turn on the compromised credentials rule for all relevant entities and ensure relevant emails are entered for those entities, or reach out to [email protected] for assistance
If one of your entities receives an alert, ZeroFOX recommends immediate password changes for the affected account
Enable 2-factor authentication for all of your organizational accounts to help mitigate phishing and credential stuffing attacks
Remain alert to potential spear phishing attacks through email and social media.

Details

No payment details were stored on the site, so the breach did not contain any financial data. The original Register article said the company did not respond to comment, but they did post a data breach notification. The post from the company said that "We are one of the smaller companies affected, apparently holding less than 2% of the total accounts affected between the 16 companies", referring to the gnosticplayers round of data breaches. Although it affected 2% of the data, it was still 11 million people who were affected by the breach.