Breach Disclosure: Stronghold Kingdoms

Stronghold Kingdoms, a massive multiplayer online roleplaying game, suffered a data breach in early 2019. The game developer did not post any update or correspondence about the breach, although there were queries sent by multiple reporters. The game is maintained and ran by London-based developer and publisher, Firefly Studios.

Recommendations

If not already enabled, turn on the compromised credentials rule for all relevant entities and ensure relevant emails are entered for those entities, or reach out to [email protected] for assistance
If one of your entities receives an alert, ZeroFOX recommends immediate password changes for the affected account
Enable 2-factor authentication for all of your organizational accounts to help mitigate phishing and credential stuffing attacks
Remain alert to potential spear phishing attacks through email and social media.

Details

This breach is another line item in the portfolio for gnosticplayers, a dark web fencer of breach data. The breach of Stronghold Kingdoms contains approximately 5.2 million accounts. The data within the breach contains email addresses, usernames and passwords stored as salted SHA1 hashes.