Breach Disclosure: Snail Games

Snail Games, a Chinese gaming company, suffered a data breach in 2015. Breached records included email and IP addresses, usernames, and unsalted MD5 hashed passwords.

Recommendations

If not already enabled, turn on the compromised credentials rule for all relevant entities and ensure relevant emails are entered for those entities, or reach out to [email protected] for assistance
If one of your entities receives an alert, ZeroFOX recommends immediate password changes for the affected account
Enable 2-factor authentication for all of your organizational accounts to help mitigate phishing and credential stuffing attacks
Remain alert to potential spear phishing attacks through email and social media.

Details

Online gaming platform Snail Games was breached in 2015. This breach included records for 1.4 million users of the platform. This database was sold as a bundle on a darkweb forum. The bundle included records from other gaming platforms, like the retro gaming site Emuparadise, and databases for Minecraft, Runescape, and Town of Salem. These records have been available for sale since January 2019.