Breach Disclosure: AnimeGame

Anime gaming site AnimeGame has experienced a data breach, exposing the credentials of over 1.4 million users. Email addresses, usernames, IP addresses, and salted hashed md5 passwords were exposed as a result of the breach.

Recommendations

If not already enabled, turn on the compromised credentials rule for all relevant entities and ensure relevant emails are entered for those entities, or reach out to [email protected] for assistance
If one of your entities receives an alert, ZeroFOX recommends immediate password changes for the affected account
Enable 2-factor authentication for all of your organizational accounts to help mitigate phishing and credential stuffing attacks

Details

AnimeGame is a site that hosts a variety of games, including a popular DragonBallZ game. The site also offers gaming guides, and a forum for users.

Figure 1. Raidforums sale ad for AnimeGame dump

The breach database was offered for sale on RaidForums, beginning February 27, 2020. Chatter on RaidForums indicates that the hashing algorithm used to store passwords on the site is known, and can potentially be dehashed.