Breach Disclosure: EpicBot

EpicBot, a bot provider for the popular online role playing game RuneScape, suffered a data breach. According to an article by ArsTechnica, the full contents of the database were leaked online, and contained 817,000 rows of breach data. The data includes email addresses, IP addresses, usernames and either salted md5 or bcrypt password hashes.

Recommendations

If not already enabled, turn on the compromised credentials rule for all relevant entities and ensure relevant emails are entered for those entities, or reach out to [email protected] for assistance
If one of your entities receives an alert, ZeroFOX recommends immediate password changes for the affected account
Enable 2-factor authentication for all of your organizational accounts to help mitigate phishing and credential stuffing attacks

Details

Raidforums user DonJuji posted a download link to the dump on October 25, 2019.

ss1

The stats in the post match the description in the ArsTechnica article.