Breach Disclosure: EpicNPC

The breach database selling and hacking forum EpicNPC ironically experienced a data breach in 2016. The forum is used for buying and selling hacking toolkits, as well as of breach databases. Exposed records include the usernames, IPs, email addresses, and salted MD5 hashed passwords of over 400,000 users.

Recommendations

If not already enabled, turn on the compromised credentials rule for all relevant entities and ensure relevant emails are entered for those entities, or reach out to [email protected] for assistance
If one of your entities receives an alert, ZeroFOX recommends immediate password changes for the affected account
Enable 2-factor authentication for all of your organizational accounts to help mitigate phishing and credential stuffing attacks
Remain alert to potential spear phishing attacks through email and social media.

Details

The hacking forum and marketplace EpicNPC was breached in January 2016. This breach impacted 409,000 users. The site is generally used for the buying and selling of account credentials for gaming and social media sites. Portions of the databases appear to be offered for sale on competitor forums, like RaidForums.